openclaw/docs/channels
nicolasstanley 4a5e9f0a4f
fix(telegram): accept messages from group members in allowlisted groups (#9775)
* fix(telegram): accept messages from group members in allowlisted groups

Issue #4559: Telegram bot was silently dropping messages from non-paired users
in allowlisted group chats due to overly strict sender filtering.

The fix adds a check to distinguish between:
1. Group itself is allowlisted → accept messages from any member
2. Group is NOT allowlisted → only accept from allowlisted senders

Changes:
- Check if group ID is in the allowlist (or allowlist is wildcard)
- Only reject sender if they're not in allowlist AND group is not allowlisted
- Improved logging to indicate the actual reason for rejection

This preserves security controls while fixing the UX issue where group members
couldn't participate unless individually allowlisted.

Backwards compatible: existing allowlists continue to work as before.

* style: format telegram fix for oxfmt compliance

* refactor(telegram): clarify group allowlist semantics in fix for #4559

Changes:
- Rename 'isGroupInAllowlist' to 'isGroupChatIdInAllowlist' for clarity
- Expand comments to explain the semantic distinction:
  * Group chat ID in allowlist -> accept any group member (fixes #4559)
  * Group chat ID NOT in allowlist -> enforce sender allowlist (preserves security)
- This addresses concerns about config semantics raised in code review

The fix maintains backward compatibility:
- 'groupAllowFrom' with group chat IDs now correctly acts as group enablement
- 'groupAllowFrom' with sender IDs continues to work as sender allowlist
- Operators should use group chat IDs for group enablement, sender IDs for sender control

Note: If operators were using 'groupAllowFrom' with group IDs expecting sender-level
filtering, they should migrate to a separate sender allowlist config. This is the
intended behavior per issue #4559.

* Telegram: allow per-group groupPolicy overrides

* Telegram: support per-group groupPolicy overrides (#9775) (thanks @nicolasstanley)

---------

Co-authored-by: George Pickett <gpickett00@gmail.com>
2026-02-05 14:45:45 -08:00
..
bluebubbles.md iMessage: promote BlueBubbles and refresh docs/skills (#8415) 2026-02-03 18:06:54 -08:00
discord.md fix: restore discord owner hint from allowlists 2026-02-04 23:34:22 -08:00
feishu.md 🤖 Feishu: expand channel support 2026-02-05 12:29:04 -08:00
googlechat.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
grammy.md Merge commit from fork 2026-02-01 10:43:54 +01:00
imessage.md iMessage: promote BlueBubbles and refresh docs/skills (#8415) 2026-02-03 18:06:54 -08:00
index.md iMessage: promote BlueBubbles and refresh docs/skills (#8415) 2026-02-03 18:06:54 -08:00
line.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
location.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
matrix.md fix(matrix): harden allowlists 2026-02-03 09:34:02 -08:00
mattermost.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
msteams.md fix: gate Teams media auth retries 2026-02-02 02:08:13 -08:00
nextcloud-talk.md fix: enforce Nextcloud Talk allowlist by user id 2026-02-03 18:03:53 -08:00
nostr.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
signal.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
slack.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
telegram.md fix(telegram): accept messages from group members in allowlisted groups (#9775) 2026-02-05 14:45:45 -08:00
tlon.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
troubleshooting.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
twitch.md fix(twitch): enforce allowFrom allowlist 2026-02-02 00:16:35 +00:00
whatsapp.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
zalo.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
zalouser.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00