Update app.js

app.js

@@ -9,29 +9,37 @@ app.get("/login", async (req, res) => {
       return res.status(400).json({ error: "Missing ?url=" });
     }
 
-    // Extract tgWebAppData from fragment
+    // Extract tgWebAppData
     const urlObj = new URL(url);
     const tgWebAppData = urlObj.hash.split("tgWebAppData=")[1]?.split("&")[0];
     if (!tgWebAppData) {
       return res.status(400).json({ error: "Invalid tgWebAppData" });
     }
 
-    // Decode twice (because it's double-encoded in your example URL)
-    const decodedOnce = decodeURIComponent(tgWebAppData);
-    const decodedTwice = decodeURIComponent(decodedOnce);
+    // Decode twice if needed
+    let decoded = decodeURIComponent(tgWebAppData);
+    try {
+      decoded = decodeURIComponent(decoded);
+    } catch (_) {}
 
-    const params = new URLSearchParams(decodedTwice);
+    const params = new URLSearchParams(decoded);
 
-    // Build initData
-    const initDataArr = [
-      `auth_date=${params.get("auth_date")}\nchat_instance=${params.get("chat_instance")}\nchat_type=${params.get("chat_type")}\nsignature=${params.get("signature")}\nuser=${params.get("user")}`,
-      params.get("hash"),
-    ];
+    // Build initData pieces
+    const block = 
+      `auth_date=${params.get("auth_date")}\n` +
+      `chat_instance=${params.get("chat_instance")}\n` +
+      `chat_type=${params.get("chat_type")}\n` +
+      `signature=${params.get("signature")}\n` +
+      `user=${params.get("user")}`;
+
+    const hash = params.get("hash");
+
+    // Here: wrap array in JSON.stringify, THEN stringify again
+    const initDataString = JSON.stringify([block, hash]);
 
-    // Send to AnimeKombat API (stringified array!)
     const response = await axios.post(
       "https://be.animekombat.com/api/auth/login",
-      { initData: JSON.stringify(initDataArr) },
+      { initData: initDataString }, // pass as string, not array
       {
         headers: {
           Accept: "application/json, text/plain, */*",
@@ -41,10 +49,10 @@ app.get("/login", async (req, res) => {
     );
 
     res.json({
-      access_token: response.data.access_token,
-      token_type: response.data.token_type,
-      expires_in: response.data.expires_in,
-      user: JSON.parse(params.get("user")), // include parsed user for convenience
+      token: response.data.access_token,
+      type: response.data.token_type,
+      expires: response.data.expires_in,
+      user: JSON.parse(params.get("user")),
     });
   } catch (err) {
     console.error(err);
@@ -57,5 +65,5 @@ app.get("/login", async (req, res) => {
 });
 
 app.listen(7860, () => {
-  console.log("Server running on http://localhost:3000");
+  console.log("Server running at http://localhost:3000");
 });