From 6471d2ffcf570b4983c30a81e66794d06d7f37e7 Mon Sep 17 00:00:00 2001
From: Ruslan Bakiev <572431+veikab@users.noreply.github.com>
Date: Fri, 8 May 2026 20:01:32 +0700
Subject: [PATCH] Fix Telegram avatar proxy headers

---
 src/auth/telegram-bot-login.ts | 4 +++-
 src/server.ts                  | 2 ++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/auth/telegram-bot-login.ts b/src/auth/telegram-bot-login.ts
index f76814b..00cb99d 100644
--- a/src/auth/telegram-bot-login.ts
+++ b/src/auth/telegram-bot-login.ts
@@ -105,7 +105,9 @@ export async function fetchTelegramPhoto(fileId: string) {
   }
 
   return {
-    contentType: response.headers.get('content-type') ?? 'image/jpeg',
+    contentType: file.file_path.toLowerCase().endsWith('.png')
+      ? 'image/png'
+      : 'image/jpeg',
     bytes: Buffer.from(await response.arrayBuffer()),
   };
 }
diff --git a/src/server.ts b/src/server.ts
index c8f5dcd..f3b4b29 100644
--- a/src/server.ts
+++ b/src/server.ts
@@ -41,6 +41,8 @@ app.get('/telegram/photo/:fileId', async (request, reply) => {
   const photo = await fetchTelegramPhoto(params.fileId);
   reply.header('content-type', photo.contentType);
   reply.header('cache-control', 'public, max-age=86400');
+  reply.header('access-control-allow-origin', '*');
+  reply.header('cross-origin-resource-policy', 'cross-origin');
   return reply.send(photo.bytes);
 });