Verify Telegram social link

Verify ownership of a Telegram social link via the Telegram Login Widget.

Flow:

Client shows the Telegram Login Widget (bot-based, one-click)
Widget returns user data (id, username, etc.) + HMAC-SHA256 hash
Client sends the full payload to this endpoint
API verifies the hash using SHA256(TELEGRAM_BOT_TOKEN) as the HMAC key
If the username matches the account's existing Telegram social link, it's marked as verified

Prerequisites:

Account must have a Telegram social link already added (via POST /v1/account/social-links)
User must have a Telegram username set

Idempotent: Calling this on an already-verified Telegram link returns success.

Authentication: Authorization: Bearer <CLIENT_JWT>

authorizationstring nullable

Bearer JWT issued by Grove that identifies the account.

Request body

idinteger required

Telegram user ID

first_namestring required

User's first name

last_namestring nullable

User's last name

usernamestring nullable

Telegram username (without @)

photo_urlstring nullable

URL of user's profile photo

auth_dateinteger required

Unix timestamp when authentication was performed

hashstring required

HMAC-SHA256 hash for data verification

Successful Response

verifiedboolean required

Whether the Telegram link is now verified

platformstring

Platform that was verified

usernamestring required

Telegram username that was verified

verification_methodstring required

Method used for verification