autopush-rs
autopush-rs copied to clipboard
mozilla-services
Push Server in Rust
**HackerOne Report:** https://hackerone.com/reports/2097694 **Report Date:** 2023-08-05 17:06:15 UTC **Reporter:** anupamas01 **Weakness:** Code Injection **Initial Report:** {panel} # Summary: hello team, I found a pip package by which I can run...
For legacy reasons, Push required a “use_webpush=true” flag. The requirement for this flag has not been needed for years. We should loosen the requirement and allow for hello without this...
Not specific to PushBackend but we should update [https://github.com/mozilla-services/websec-check/blob/main/rust.md](https://github.com/mozilla-services/websec-check/blob/main/rust.md|smart-link) Particularly the Recommended crates could use an update (e.g. add tracing along with slog, remove hyper or specify it’s lower level,...
UAIDs are represented by `Uuid` as are channel_ids. This makes a lot sense except UAID’s representation in the db has historically been of the Uuid “simple” format of all lowercase...
┆Issue is synchronized with this [Jira Bug](https://mozilla-hub.atlassian.net/browse/SYNC-3676)
Reduces some of the less useful errors from the stdout logs. * Fixes the Bad Aud to be shorter, clearer Closes SYNC-4243
Closes [SYNC-4116](https://mozilla-hub.atlassian.net/browse/SYNC-4116) Summary & Acceptance Criteria Met: - `unittest` fully removed. - All tests pulled out of classes and into individual test classes, all references to duplicated class boilerplate in...
Legacy database implementation modules should no longer be used and the code should be removed. Unused dependencies should be removed from appropriate crates. ┆Issue is synchronized with this [Jira Task](https://mozilla-hub.atlassian.net/browse/SYNC-3451)
As part of [https://github.com/mozilla-services/autopush-rs/commit/2fd708654e92838953d030274bbf3de52b45f7d0](https://github.com/mozilla-services/autopush-rs/commit/2fd708654e92838953d030274bbf3de52b45f7d0|smart-link) I decided to construct the Pool to contain `BigtableDb`, which is owned and managed by us. While this works, it may be more efficient to pool...
Sentry Issue: [TOKENSERVER-PROD-B](https://mozilla.sentry.io/issues/3747309866/?referrer=jira_integration) panic: called `Result::unwrap()` on an `Err` value: ApiError { kind: Db(DbError { kind: Pool(Error(Some("Too many connections"))), status: 500, backtrace: 0: ::from at syncserver-db-common/src/error.rs:119:24 ::into at /rustc/897e37553bba8b42751c67658967889d11ecd120/library/core/src/convert/mod.rs:552:9 ::from...