Verify Telegram Login Widget in PHP and Yii2: HMAC-SHA-256 hash, auth_date expiry, and binding telegram_id to a user

Step-by-step PHP/Yii2 guide to verifying Telegram Login Widget data: HMAC-SHA-256 hash check, auth_date window, and binding telegram_id to your user model.