Push API Guide: How to Send Push Message to Application

The Push API gives web applications the ability to receive messages pushed to them from a server, whether or not the web app is in the foreground, or even currently loaded, on a user agent. This lets developers deliver asynchronous notifications and updates to users that opt in, resulting in better engagement with timely new content.

Push concepts and usage

When implementing PushManager subscriptions, it is vitally important that you protect against CSRF/XSRF issues in your app. See the following articles for more information:

• Cross-Site Request Forgery (CSRF) Prevention Cheat Sheet
• Preventing CSRF and XSRF Attacks

For an app to receive push messages, it has to have an active service worker. When the service worker is active, it can subscribe to push notifications, using

PushManager.subscribe()

This should be done in response to a user gesture, such as clicking a button, for example:

btn.addEventListener('click', function() {
  serviceWorkerRegistration.pushManager.subscribe(options)
  .then(function(pushSubscription) {
    // handle subscription
  });
})

This is not only best practice — you should not be spamming users with notifications they didn't agree to — but going forward browsers will explicitly disallow notifications not triggered in response to a user gesture. Firefox is already doing this from version 72, for example.

The resulting

PushSubscription

The service worker will be started as necessary to handle incoming push messages, which are delivered to the

ServiceWorkerGlobalScope.onpush

This allows apps to react to push messages being received, for example, by displaying a notification (using

ServiceWorkerRegistration.showNotification()

Each subscription is unique to a service worker.  The endpoint for the subscription is a unique capability URL: knowledge of the endpoint is all that is necessary to send a message to your application. The endpoint URL therefore needs to be kept secret, or other applications might be able to send push messages to your application.

Activating a service worker to deliver a push message can result in increased resource usage, particularly of the battery. Different browsers have different schemes for handling this, there is currently no standard mechanism. Both Firefox and Chrome allow any number of Push messages that generate notifications. Firefox, but not Chrome, allows a limited number (quota) of push messages to be sent to an application that don't display a notification. The quota is refreshed each time the site is visited.

Note: As of Gecko 44, the allowed quota of push messages per application is not incremented when a new notification fires, when another is still visible, for a period of three seconds. This handles cases where a burst of Push messages is received, and not all generate a visible notification.

Note: Chrome versions earlier than 52 require you to set up a project on Google Cloud Messaging to send push messages, and use the associated project number and API key when sending push notifications. It also requires an app manifest, with some special parameters to use this service.

Interfaces

PushEvent

Represents a push action, sent to the global scope of a

ServiceWorker

PushSubscription

PushManager

Provides a way to receive notifications from third-party servers, as well as request URLs for push notifications. This interface has replaced the functionality offered by the obsolete

PushRegistrationManager

PushMessageData

Provides access to push data sent by a server, and includes methods to manipulate the received data.

PushSubscription

Provides a subcription's URL endpoint, and allows unsubscription from a push service.

Service worker additions

The following additions to the Service Worker API have been specified in the Push API spec to provide an entry point for using Push messages. They also monitor and respond to push and subscription change events.

ServiceWorkerRegistration.pushManager

Returns a reference to the

PushManager

ServiceWorkerGlobalScope.onpush

An event handler fired whenever a

push

ServiceWorkerGlobalScope.onpushsubscriptionchange

An event handler fired whenever a

pushsubscriptionchange

Examples

Mozilla's ServiceWorker Cookbook contains many useful Push examples.

Specifications

Browser compatibility

PushEvent

PushMessageData

See also

• Sending VAPID identified WebPush Notifications via Mozilla’s Push Service
• Web Push Notifications: Timely, Relevant, and Precise, Joseph Medley
• Service Worker API
  
  

Credits

• Source: https://developer.mozilla.org/en-US/docs/Web/API/Push_API
• Published under Open CC Attribution ShareAlike 3.0 licence