Skip to content

Inject communityID of connection into UCAN during registration and validate on send #3105

@adrastaea

Description

@adrastaea

Description

When a device registers their apnsDeviceToken with QPS, QPS/QSS will know what community they are signed into on that websocket connection. We should leverage that as a source of truth for what community the generated UCAN should be associated with. Add a new fact to the UCAN with the communityId that the connection is associated with (do not add a field to the PUSH_REGISTRATION message, use the CommunitiesManagerService to get the community that they are signed into).

This will allow us to establish that any UCAN used to send a push notification is only sending a push notification to devices also within the community that the initiating user is signed into validly.

Acceptance Criteria

  • QPS adds a fact to the UCAN with the communityId pulled from CommunitiesManagerService
  • QPS validates that the communityId fact in UCANs supplied in SEND_PUSH all are equivalent to the community that the user sending the push is signed into

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    Status

    No status

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions