From the team

Laraue Software Blog — C# .NET Development & Open Source

Real code, real decisions, real tradeoffs. We write about what we build — .NET libraries, Telegram bots, AI integrations, and the architecture mistakes worth learning from.

article9 min read

Telegram Login Widget vs Mini App auth in .NET — two validation schemes, one JWT

Part 13 of building a Telegram task tracker solo. Users asked for a web version outside Telegram, so it needed its own login. Adding the Telegram Login Widget meant a second validation scheme alongside the Mini App's — and both end at the same JWT, because the app barely depends on Telegram past login.

dotnetaspnet-coretelegramauthenticationtelegram-login-widgetjwtdevlog

article25 min read

Telegram Mini App authentication in .NET end to end — initData validation, JWT issuing and the Nuxt frontend

Part 8 of building a Telegram task tracker solo. The full Telegram Mini App authentication flow in a real .NET and Nuxt app — validating the initData signature on the server with HMAC-SHA256, issuing and using a JWT bearer, reading the user from HttpContext, and why CORS matters.

dotnetaspnet-corenuxttelegram-mini-appauthenticationinitdatajwtcorsdevlog