using MongoDB.Entities; namespace PrivaPub.Models.Social { // A Web Push subscription (completion program R9). One per Mastodon access token, as on Mastodon (a new one made with the // same token replaces it), and so one persona's, the token's subject: never its login's, so nothing pairs sibling // personas. It holds the token it was made with, which the encrypted payload carries back to the client as Mastodon's // does (`access_token`), so it goes the moment the token does: revoked (/oauth/revoke, its login's sessions ended), its // persona suspended, moved or deleted, a restore. Never in a backup (ServerBackup.Excluded). public class PushSubscription : Entity { public string AvatarId { get; set; } public string TokenId { get; set; }//the OpenIddict token's id; unique public string AccessToken { get; set; }//the bearer token as the client sent it when it subscribed public string Endpoint { get; set; }//the push service's URL for this client public string P256dh { get; set; }//the client's ECDH public key: an uncompressed P-256 point, base64url as it sent it public string Auth { get; set; }//its 16-byte authentication secret, base64url as it sent it public bool Standard { get; set; }//RFC 8291 aes128gcm and RFC 8292 `vapid` when true (Mastodon 4.4), else the aesgcm draft public List Alerts { get; set; } = new();//the alerts turned on, by Mastodon's names (WebPush.Alerts) public PushPolicy Policy { get; set; } = PushPolicy.All; public DateTime CreatedAt { get; set; } = DateTime.UtcNow; public DateTime UpdatedAt { get; set; } = DateTime.UtcNow; } // whose notifications are pushed (Mastodon's data[policy]): everyone's, the accounts the persona follows, the accounts // that follow it, nobody's public enum PushPolicy { All, Followed, Follower, None } }