Security/Reviews/SimplePush: Difference between revisions

Jump to navigation Jump to search
no edit summary
(Created page with "{{SecReviewInfo |SecReview name=Simple Push API }} {{SecReview}} {{SecReviewActionStatus |SecReview action item status=None }}")
 
No edit summary
Line 1: Line 1:
{{SecReviewInfo
{{SecReviewInfo
|SecReview name=Simple Push API
|SecReview name=Simple Push API
|SecReview target=https://wiki.mozilla.org/WebAPI/SimplePush
}}
{{SecReview
|SecReview feature goal=Background is here: https://wiki.mozilla.org/WebAPI/SimplePush
Push Notifications - currently on designed for B2G
Will be implemented on desktop, but this is specified yet.
Found it: https://etherpad.mozilla.org/n1f1znLCQh
===Registration Flow===
1. User Agent sends "push-register" message to app
Sorry  the documentation is not clear on that, will fix. push-register is only  sent sometimes and is a recovery mechanism. Ideally applications call  mozPushNotification.register() whenever they want
2. In the handler for push-register, the app calls navigator.pushNotifications.register() once for each topic it wants to listen for.
3.  register() causes the user-agent to request a new unique channel  identifier for the app by requesting a new channelID from the Push  Server. The User Agent generates the GUID4 and asks the push server if it is available.
4. Upon recieving the pushEndpoint and channelID from the Push Server, the user-agent returns the pushEndpoint to the app, which represents the URL which will recieve notifications for this channel.
5. The app sends this URL to its App Server, to let it know that it is listening to push requests sent to this URL
===Sending a message===
1. App Server posts a message to the Push Notification URL containing a version string
2. The version of this channelID is stored on the PushServer
3.  The user-agent calls /v1/update to retrieve a list of all registered  all channels and all known versions (for this particular user-agent-id)
}}
}}
{{SecReview}}
{{SecReviewActionStatus
{{SecReviewActionStatus
|SecReview action item status=None
|SecReview action item status=None
}}
}}
canmove, Confirmed users, Bureaucrats and Sysops emeriti
2,776

edits

Navigation menu