New issue
Advanced search Search tips

Issue 600286 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Jan 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 3
Type: Bug



Sign in to add a comment

GCM tokens should not be cached for more than a week

Project Member Reported by joh...@chromium.org, Apr 4 2016

Issue description

It's possible for GCM registration/InstanceID tokens to be invalidated server-side without Chrome's knowledge, for example if the device is left in a drawer powered off for N months.

In such cases, a website that follows best practice by frequently calling PushManager.subscribe() to ensure its subscription is still valid would break, because Chrome would keep returning the invalid cached token.

The Android GCM client works around this class of issues by only caching tokens for a week, after which calls to subscribe will hit the server again (see https://goto.google.com/hxejm).

We should do the same. These tokens are cached both in Chrome GCM code and Push code, so we'll need to fix multiple layers of caching.
 

Comment 1 by peter@chromium.org, Apr 4 2016

There are ideas about auto-expiring GCM subscriptions after a few weeks as well, for which the client can be told about the subscription having changed. (And we thus can fire the `onpushsubscriptionchange` event and clean up caches accordingly.)

Comment 2 by peter@chromium.org, Apr 4 2016

Cc: -joh...@chromium.org -miguelg@chromium.org -mvanouwe...@chromium.org -harkness@chromium.org
-cc list (let's only cc people who have an interest in this particular issue)
See also b/27996367
Status: Available (was: Untriaged)
Project Member

Comment 5 by sheriffbot@chromium.org, Apr 10 2017

Labels: Hotlist-Recharge-Cold
Status: Untriaged (was: Available)
This issue has been available for more than 365 days, and should be re-evaluated. Please re-triage this issue.
The Hotlist-Recharge-Cold label is applied for tracking purposes, and should not be removed after re-triaging the issue.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 6 by awdf@chromium.org, Jul 5 2017

Labels: -Pri-2 Pri-3
Status: Available (was: Untriaged)

Comment 7 by peter@chromium.org, Jan 5 2018

Status: WontFix (was: Available)

Sign in to add a comment