---
taskmaster_id: "5.2"
status: "done"
priority: "high"
depends_on: ["1"]
parent_id: "5"
source: "taskmaster"
generated_at: "2026-05-28T11:49:27.076Z"
---

# 5.2 - Build Telegram identity linking and session model

- [x] 5.2 - Build Telegram identity linking and session model #taskmaster #priority/high #status/done ⏫ 🆔 tm-5-2 ⛔ tm-1

## Metadata

| Field | Value |
| --- | --- |
| Taskmaster ID | 5.2 |
| Status | done |
| Priority | high |
| Dependencies | 1 |
| Parent | 5 - Deliver Telegram-native app, bot, and wallet experience |

## Description

Implement secure account linking between Telegram users and Amanat accounts.

## Details

Backend must verify Telegram Mini App initData before creating a Telegram session. Store an auditable Telegram user ID to Amanat user link. Support existing users, new users, unlinking, blocked accounts, duplicate-link attempts, session expiry, replay protection, rate limits, and audit logs.

## Verification

See Telegram-native PRD acceptance criteria.