|
|
@@ -30,27 +30,19 @@ var webPushEndpointAllowRegex = regexp.MustCompile(webPushEndpointAllowRegexStr)
|
|
|
|
|
|
func (s *Server) handleWebPushUpdate(w http.ResponseWriter, r *http.Request, v *visitor) error {
|
|
|
payload, err := readJSONWithLimit[webPushSubscriptionPayload](r.Body, jsonBodyBytesLimit, false)
|
|
|
-
|
|
|
if err != nil || payload.BrowserSubscription.Endpoint == "" || payload.BrowserSubscription.Keys.P256dh == "" || payload.BrowserSubscription.Keys.Auth == "" {
|
|
|
return errHTTPBadRequestWebPushSubscriptionInvalid
|
|
|
- }
|
|
|
-
|
|
|
- if !webPushEndpointAllowRegex.MatchString(payload.BrowserSubscription.Endpoint) {
|
|
|
+ } else if !webPushEndpointAllowRegex.MatchString(payload.BrowserSubscription.Endpoint) {
|
|
|
return errHTTPBadRequestWebPushEndpointUnknown
|
|
|
- }
|
|
|
-
|
|
|
- if len(payload.Topics) > webPushTopicSubscribeLimit {
|
|
|
+ } else if len(payload.Topics) > webPushTopicSubscribeLimit {
|
|
|
return errHTTPBadRequestWebPushTopicCountTooHigh
|
|
|
}
|
|
|
-
|
|
|
- u := v.User()
|
|
|
-
|
|
|
topics, err := s.topicsFromIDs(payload.Topics...)
|
|
|
if err != nil {
|
|
|
return err
|
|
|
}
|
|
|
-
|
|
|
if s.userManager != nil {
|
|
|
+ u := v.User()
|
|
|
for _, t := range topics {
|
|
|
if err := s.userManager.Authorize(u, t.ID, user.PermissionRead); err != nil {
|
|
|
logvr(v, r).With(t).Err(err).Debug("Access to topic %s not authorized", t.ID)
|
|
|
@@ -58,11 +50,9 @@ func (s *Server) handleWebPushUpdate(w http.ResponseWriter, r *http.Request, v *
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
-
|
|
|
if err := s.webPush.UpdateSubscriptions(payload.Topics, v.MaybeUserID(), payload.BrowserSubscription); err != nil {
|
|
|
return err
|
|
|
}
|
|
|
-
|
|
|
return s.writeJSON(w, newSuccessResponse())
|
|
|
}
|
|
|
|
|
|
@@ -70,69 +60,68 @@ func (s *Server) publishToWebPushEndpoints(v *visitor, m *message) {
|
|
|
subscriptions, err := s.webPush.SubscriptionsForTopic(m.Topic)
|
|
|
if err != nil {
|
|
|
logvm(v, m).Err(err).Warn("Unable to publish web push messages")
|
|
|
-
|
|
|
return
|
|
|
}
|
|
|
-
|
|
|
- for i, xi := range subscriptions {
|
|
|
- go func(i int, sub webPushSubscription) {
|
|
|
- ctx := log.Context{"endpoint": sub.BrowserSubscription.Endpoint, "username": sub.UserID, "topic": m.Topic, "message_id": m.ID}
|
|
|
-
|
|
|
- s.sendWebPushNotification(newWebPushPayload(fmt.Sprintf("%s/%s", s.config.BaseURL, m.Topic), *m), &sub, &ctx)
|
|
|
- }(i, xi)
|
|
|
+ payload, err := json.Marshal(newWebPushPayload(fmt.Sprintf("%s/%s", s.config.BaseURL, m.Topic), m))
|
|
|
+ if err != nil {
|
|
|
+ log.Tag(tagWebPush).Err(err).Warn("Unable to marshal expiring payload")
|
|
|
+ return
|
|
|
+ }
|
|
|
+ for _, subscription := range subscriptions {
|
|
|
+ ctx := log.Context{"endpoint": subscription.BrowserSubscription.Endpoint, "username": subscription.UserID, "topic": m.Topic, "message_id": m.ID}
|
|
|
+ if err := s.sendWebPushNotification(payload, subscription, &ctx); err != nil {
|
|
|
+ log.Tag(tagWebPush).Err(err).Fields(ctx).Warn("Unable to publish web push message")
|
|
|
+ }
|
|
|
}
|
|
|
}
|
|
|
|
|
|
+// TODO this should return error
|
|
|
+// TODO the updated_at field is not actually updated ever
|
|
|
+
|
|
|
func (s *Server) expireOrNotifyOldSubscriptions() {
|
|
|
subscriptions, err := s.webPush.ExpireAndGetExpiringSubscriptions(s.config.WebPushExpiryWarningDuration, s.config.WebPushExpiryDuration)
|
|
|
if err != nil {
|
|
|
log.Tag(tagWebPush).Err(err).Warn("Unable to publish expiry imminent warning")
|
|
|
-
|
|
|
+ return
|
|
|
+ } else if len(subscriptions) == 0 {
|
|
|
return
|
|
|
}
|
|
|
-
|
|
|
- for i, xi := range subscriptions {
|
|
|
- go func(i int, sub webPushSubscription) {
|
|
|
- ctx := log.Context{"endpoint": sub.BrowserSubscription.Endpoint}
|
|
|
-
|
|
|
- s.sendWebPushNotification(newWebPushSubscriptionExpiringPayload(), &sub, &ctx)
|
|
|
- }(i, xi)
|
|
|
- }
|
|
|
-
|
|
|
- log.Tag(tagWebPush).Debug("Expired old subscriptions and published %d expiry imminent warnings", len(subscriptions))
|
|
|
-}
|
|
|
-
|
|
|
-func (s *Server) sendWebPushNotification(payload any, sub *webPushSubscription, ctx *log.Context) {
|
|
|
- jsonPayload, err := json.Marshal(payload)
|
|
|
-
|
|
|
+ payload, err := json.Marshal(newWebPushSubscriptionExpiringPayload())
|
|
|
if err != nil {
|
|
|
- log.Tag(tagWebPush).Err(err).Fields(*ctx).Debug("Unable to publish web push message")
|
|
|
+ log.Tag(tagWebPush).Err(err).Warn("Unable to marshal expiring payload")
|
|
|
return
|
|
|
}
|
|
|
+ go func() {
|
|
|
+ for _, subscription := range subscriptions {
|
|
|
+ ctx := log.Context{"endpoint": subscription.BrowserSubscription.Endpoint}
|
|
|
+ if err := s.sendWebPushNotification(payload, &subscription, &ctx); err != nil {
|
|
|
+ log.Tag(tagWebPush).Err(err).Fields(ctx).Warn("Unable to publish expiry imminent warning")
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }()
|
|
|
+ log.Tag(tagWebPush).Debug("Expiring old subscriptions and published %d expiry imminent warnings", len(subscriptions))
|
|
|
+}
|
|
|
|
|
|
- resp, err := webpush.SendNotification(jsonPayload, &sub.BrowserSubscription, &webpush.Options{
|
|
|
+func (s *Server) sendWebPushNotification(message []byte, sub *webPushSubscription, ctx *log.Context) error {
|
|
|
+ resp, err := webpush.SendNotification(message, &sub.BrowserSubscription, &webpush.Options{
|
|
|
Subscriber: s.config.WebPushEmailAddress,
|
|
|
VAPIDPublicKey: s.config.WebPushPublicKey,
|
|
|
VAPIDPrivateKey: s.config.WebPushPrivateKey,
|
|
|
- // Deliverability on iOS isn't great with lower urgency values,
|
|
|
- // and thus we can't really map lower ntfy priorities to lower urgency values
|
|
|
- Urgency: webpush.UrgencyHigh,
|
|
|
+ Urgency: webpush.UrgencyHigh, // iOS requires this to ensure delivery
|
|
|
})
|
|
|
-
|
|
|
if err != nil {
|
|
|
- log.Tag(tagWebPush).Err(err).Fields(*ctx).Debug("Unable to publish web push message")
|
|
|
+ log.Tag(tagWebPush).Err(err).Fields(*ctx).Debug("Unable to publish web push message, removing endpoint")
|
|
|
if err := s.webPush.RemoveByEndpoint(sub.BrowserSubscription.Endpoint); err != nil {
|
|
|
- log.Tag(tagWebPush).Err(err).Fields(*ctx).Warn("Unable to expire subscription")
|
|
|
+ return err
|
|
|
}
|
|
|
- return
|
|
|
+ return err
|
|
|
}
|
|
|
-
|
|
|
- // May want to handle at least 429 differently, but for now treat all errors the same
|
|
|
- if !(200 <= resp.StatusCode && resp.StatusCode <= 299) {
|
|
|
- log.Tag(tagWebPush).Fields(*ctx).Field("response", resp).Debug("Unable to publish web push message")
|
|
|
+ if (resp.StatusCode < 200 || resp.StatusCode > 299) && resp.StatusCode != 429 {
|
|
|
+ log.Tag(tagWebPush).Fields(*ctx).Field("response_code", resp.StatusCode).Debug("Unable to publish web push message, unexpected response")
|
|
|
if err := s.webPush.RemoveByEndpoint(sub.BrowserSubscription.Endpoint); err != nil {
|
|
|
- log.Tag(tagWebPush).Err(err).Fields(*ctx).Warn("Unable to expire subscription")
|
|
|
+ return err
|
|
|
}
|
|
|
- return
|
|
|
+ return errHTTPInternalErrorWebPushUnableToPublish.Fields(*ctx)
|
|
|
}
|
|
|
+ return nil
|
|
|
}
|