From 22cd661abb476a5ef9de1e7352c0b97d6b68ef82 Mon Sep 17 00:00:00 2001 From: onysd Date: Mon, 20 Jul 2026 12:10:19 +0300 Subject: [PATCH] fix --- internal/rpc/auth_gate.go | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/internal/rpc/auth_gate.go b/internal/rpc/auth_gate.go index 4beaf504..ab1df015 100644 --- a/internal/rpc/auth_gate.go +++ b/internal/rpc/auth_gate.go @@ -24,6 +24,13 @@ func rpcAllowedWithoutAuthorization(id uint32) bool { tg.AuthSignInRequestTypeID, tg.AuthSignUpRequestTypeID, tg.AuthImportBotAuthorizationRequestTypeID, + // auth.importAuthorization authenticates a FRESH connection (e.g. the + // client opening a second connection for what it believes is a + // different data-center, typically to fetch media/files) by proving + // the identity exported from an already-authorized connection via + // auth.exportAuthorization — it must be reachable before this + // connection's own auth_key has been bound to a user. + tg.AuthImportAuthorizationRequestTypeID, tg.AuthCheckPasswordRequestTypeID, tg.AuthRequestPasswordRecoveryRequestTypeID, tg.AuthRecoverPasswordRequestTypeID,