Authonyt

YouTube Upload Bot • Cloudflare Pages

Open Telegram Bot Checking…

Welcome

This site hosts the OAuth flow + backend endpoints for the Telegram bot. Users connect their Google/YouTube account here, then upload from Telegram.

Tip: if you only want the bot, tap Open Telegram Bot. If OAuth looks stuck, retry from the bot and allow popups.

How users connect

  • User starts the bot and adds a profile (client id + secret).
  • Bot requests a short login link (ticket-based URL).
  • User authorizes Google → this site stores refresh token encrypted in KV.
  • Back in Telegram, uploads work using rotated/selected profiles.

Security notes

  • Client secret + refresh token are stored encrypted using MASTER_KEY_B64.
  • Admin endpoints are protected by BOT_BACKEND_KEY or HF_API_KEY.
  • Login links are short-lived, one-time tickets.
  • Allowlist endpoints let you control who can use the bot.

Quick links

  • /health (status)
  • /oauth/start (user)
  • /oauth/callback (user)

If something fails

  • Try bot → Re-auth (Google may not return refresh token on re-auth).
  • If token never comes, revoke app access in Google account and retry.
  • Check /api/stats_today (private) for errors.

Owner mode

  • Use allow/disallow to control access.
  • Use list users/allowed to audit (keep protected!).
  • Rotate profiles per channel to avoid quota limits.