fix(telegram): always register session generation endpoints

Session endpoints (/proxy/telegram/session/{start,verify,2fa,cancel})
were only registered when enable_telegram=True (which defaults to False).
POST requests to those paths fell through to the StaticFiles catch-all
mount, which only handles GET/HEAD and returned 405 Method Not Allowed.

Split session routes into a separate telegram_session_router that is
always included unconditionally, independent of enable_telegram. This
allows users to generate a session string via the web UI before setting
enable_telegram=True — which is the intended workflow.

Closes #280

Author: mhdzumair

mediaflow_proxy/main.py

@@ -309,6 +309,12 @@ async def check_base64_url(url: str):
     from mediaflow_proxy.routes.acestream import acestream_router
 
     app.include_router(acestream_router, prefix="/proxy", tags=["acestream"], dependencies=[Depends(verify_api_key)])
+from mediaflow_proxy.routes.telegram import telegram_session_router
+
+# Session generation endpoints are always available so users can generate a
+# session string even before enabling the Telegram feature.
+app.include_router(telegram_session_router, prefix="/proxy", tags=["telegram"], dependencies=[Depends(verify_api_key)])
+
 if settings.enable_telegram:
     from mediaflow_proxy.routes.telegram import telegram_router
 

mediaflow_proxy/routes/telegram.py

@@ -31,6 +31,13 @@
 logger = logging.getLogger(__name__)
 telegram_router = APIRouter()
 
+# Session generation routes are registered unconditionally (independent of
+# enable_telegram) so users can generate a session string before enabling the
+# Telegram feature.  Mounting them on telegram_router would make them
+# unavailable when enable_telegram=False, causing the StaticFiles catch-all
+# to return 405 on POST requests.
+telegram_session_router = APIRouter()
+
 if TYPE_CHECKING:
     from mediaflow_proxy.utils.telegram import TelegramMediaRef
 
@@ -904,7 +911,7 @@ class Session2FARequest(BaseModel):
     password: str
 
 
-@telegram_router.post("/telegram/session/start")
+@telegram_session_router.post("/telegram/session/start")
 async def session_start(request: SessionStartRequest):
     """
     Start the session generation process.
@@ -995,7 +1002,7 @@ async def session_start(request: SessionStartRequest):
         raise HTTPException(status_code=500, detail=f"Failed to start session: {type(e).__name__}: {str(e)}")
 
 
-@telegram_router.post("/telegram/session/verify")
+@telegram_session_router.post("/telegram/session/verify")
 async def session_verify(request: SessionCodeRequest):
     """
     Verify the code sent to user's Telegram.
@@ -1053,7 +1060,7 @@ async def session_verify(request: SessionCodeRequest):
         raise HTTPException(status_code=400, detail=f"Verification failed: {error_msg}")
 
 
-@telegram_router.post("/telegram/session/2fa")
+@telegram_session_router.post("/telegram/session/2fa")
 async def session_2fa(request: Session2FARequest):
     """
     Complete 2FA authentication.
@@ -1098,7 +1105,7 @@ async def session_2fa(request: Session2FARequest):
         raise HTTPException(status_code=400, detail=f"2FA verification failed: {error_msg}")
 
 
-@telegram_router.post("/telegram/session/cancel")
+@telegram_session_router.post("/telegram/session/cancel")
 async def session_cancel(session_id: str = Query(..., description="Session ID to cancel")):
     """
     Cancel a pending session generation.