diff --git a/worker/src/worker.ts b/worker/src/worker.ts
index 2857e29f..7f2541b6 100644
--- a/worker/src/worker.ts
+++ b/worker/src/worker.ts
@@ -52,7 +52,7 @@ app.use('/*', async (c, next) => {
 
 	// check header x-custom-auth
 	const passwords = getPasswords(c);
-	if (!c.req.path.startsWith("/open_api") && passwords && passwords.length > 0) {
+	if (!c.req.path.startsWith("/open_api") && !c.req.path.startsWith("/telegram/") && passwords && passwords.length > 0) {
 		const auth = c.req.raw.headers.get("x-custom-auth");
 		if (!auth || !passwords.includes(auth)) {
 			return c.text(msgs.CustomAuthPasswordMsg, 401)