Update app.js

app.js

@@ -13,57 +13,94 @@ app.get("/login", async (req, res) => {
     const urlObj = new URL(url);
     const tgWebAppData = urlObj.hash.split("tgWebAppData=")[1]?.split("&")[0];
     if (!tgWebAppData) {
-      return res.status(400).json({ error: "Invalid tgWebAppData" });
+      return res.status(400).json({
+        error: "Invalid tgWebAppData",
+        debug: { hash: urlObj.hash }
+      });
     }
 
-    // Decode twice if needed
-    let decoded = decodeURIComponent(tgWebAppData);
+    // Try decoding multiple times
+    let decoded = tgWebAppData;
+    let decodes = [decoded];
     try {
       decoded = decodeURIComponent(decoded);
+      decodes.push(decoded);
+      decoded = decodeURIComponent(decoded);
+      decodes.push(decoded);
     } catch (_) {}
 
     const params = new URLSearchParams(decoded);
 
-    // Build initData pieces
-    const block = 
-      `auth_date=${params.get("auth_date")}\n` +
-      `chat_instance=${params.get("chat_instance")}\n` +
-      `chat_type=${params.get("chat_type")}\n` +
-      `signature=${params.get("signature")}\n` +
-      `user=${params.get("user")}`;
-
+    // Extract parameters
+    const userRaw = params.get("user");
+    const auth_date = params.get("auth_date");
+    const chat_instance = params.get("chat_instance");
+    const chat_type = params.get("chat_type");
+    const signature = params.get("signature");
     const hash = params.get("hash");
 
-    // Here: wrap array in JSON.stringify, THEN stringify again
+    // Check required values
+    if (!userRaw || !hash) {
+      return res.status(400).json({
+        error: "Missing required values",
+        debug: { decodes, params: Object.fromEntries(params) }
+      });
+    }
+
+    // Build initData block
+    const block =
+      `auth_date=${auth_date}\n` +
+      `chat_instance=${chat_instance}\n` +
+      `chat_type=${chat_type}\n` +
+      `signature=${signature}\n` +
+      `user=${userRaw}`;
+
     const initDataString = JSON.stringify([block, hash]);
 
-    const response = await axios.post(
-      "https://be.animekombat.com/api/auth/login",
-      { initData: initDataString }, // pass as string, not array
-      {
-        headers: {
-          Accept: "application/json, text/plain, */*",
-          "Content-Type": "application/json",
+    // Try calling AnimeKombat
+    let response;
+    try {
+      response = await axios.post(
+        "https://be.animekombat.com/api/auth/login",
+        { initData: initDataString },
+        {
+          headers: {
+            Accept: "application/json, text/plain, */*",
+            "Content-Type": "application/json",
+          },
+        }
+      );
+    } catch (err) {
+      return res.status(err.response?.status || 500).json({
+        error: "AnimeKombat rejected request",
+        reason: err.response?.data || err.message,
+        debug: {
+          initDataString,
+          decodes,
+          params: Object.fromEntries(params),
         },
-      }
-    );
+      });
+    }
 
+    // Success
     res.json({
       token: response.data.access_token,
       type: response.data.token_type,
       expires: response.data.expires_in,
-      user: JSON.parse(params.get("user")),
+      user: (() => {
+        try {
+          return JSON.parse(userRaw);
+        } catch {
+          return userRaw;
+        }
+      })(),
+      debug: { initDataString, decodes }
     });
   } catch (err) {
-    console.error(err);
-    if (err.response) {
-      res.status(err.response.status).json(err.response.data);
-    } else {
-      res.status(500).json({ error: err.message });
-    }
+    res.status(500).json({ error: err.message });
   }
 });
 
-app.listen(7860, () => {
-  console.log("Server running at http://localhost:3000");
-});
+app.listen(7860, () =>
+  console.log("Server running at http://localhost:3000")
+);