Merge pull request #1 from VeyDlin/codex

Fix WebHook server token validation

Author: VeyDlin

BotWorker/BotWorkerWebHookServer.cs

@@ -43,10 +43,10 @@ protected override async Task StartHandleAsync() {
     private async Task HandlePostRequestAsync(HttpListenerContext context) {
         try {
             using (var reader = new StreamReader(context.Request.InputStream)) {
-                if (ValidateTelegramHeader(context.Request.Headers["X-Telegram-Bot-Api-Secret-Token"])) {
-                    context.Response.StatusCode = (int)HttpStatusCode.Forbidden;
-                    return;
-                }
+                if (!ValidateTelegramHeader(context.Request.Headers["X-Telegram-Bot-Api-Secret-Token"])) {
+                    context.Response.StatusCode = (int)HttpStatusCode.Forbidden;
+                    return;
+                }
 
                 var body = await reader.ReadToEndAsync();            
                 _ = Task.Run(async () => {