Struct Webpusher

coderd/webpush/webpush.go:165–191

}

type Webpusher struct {
	store database.Store
	log   *slog.Logger
	// VAPID allows us to identify the sender of the message.
	// This must be a https:// URL or an email address.
	// Some push services (such as Apple's) require this to be set.
	vapidSub string

	// public and private keys for VAPID. These are used to sign and encrypt
	// the message payload.
	VAPIDPublicKey  string
	VAPIDPrivateKey string

	// httpClient is an SSRF-safe HTTP client that rejects connections to
	// private, loopback, and link-local IP addresses at dial time. This
	// closes the DNS rebinding TOCTOU gap where a hostname passes URL
	// validation but resolves to a private IP when the connection is made.
	httpClient *http.Client

	clock quartz.Clock

	cacheMu                 sync.RWMutex
	subscriptionCache       map[uuid.UUID]cachedSubscriptions
	subscriptionGenerations map[uuid.UUID]uint64
	subscriptionCacheTTL    time.Duration
	subscriptionFetches     singleflight.Group[string, []database.WebpushSubscription]
}

func (n *Webpusher) Dispatch(ctx context.Context, userID uuid.UUID, msg codersdk.WebpushMessage) error {
	subscriptions, err := n.subscriptionsForUser(ctx, userID)