Function validateWebAppData

validateWebAppData(
    initData: string,
    botToken: string,
    options?: ValidateWebAppDataOptions,
): boolean
Validates Telegram Mini App initData signature using HMAC-SHA256 according to official Telegram specifications.
Parameters
- initData: string
  Raw URL-encoded query string received from Telegram.WebApp.initData.
- botToken: string
  The bot token used to verify data authenticity.
- options: ValidateWebAppDataOptions = {}
  Optional validation settings such as maxAgeSeconds.
Returns boolean
true if the signature and expiration timestamp are valid; false otherwise.
Example
```
const isValid = validateWebAppData(req.headers["x-telegram-init-data"], botToken);
if (!isValid) {
  return res.status(401).send("Unauthorized");
}
```