How can I protect the key from the TG bot?

Question

Python

There is a program that works through the api to the telegram :)
Until I made a full-fledged client and an administrator client, I organized everything through telegram) everything seems to work, but there is one thing, but it's all easy to hack and get access to my bot) how can I secure?

Answer 1

Keep money in the savings bank tokens on the server, make requests to the server via the API, only allow authorized users in the API using personal tokens, for example JWT :-)