mozilla-services / autopush

Python Web Push Server used by Mozilla
https://autopush.readthedocs.io/
Mozilla Public License 2.0
217 stars 34 forks source link

Server should check if application_key is raw. #1361

Open jrconlin opened 4 years ago

jrconlin commented 4 years ago

https://sentry.prod.mozaws.net/operations/autopush-prod/issues/7345332/events/39318554/

Clients sending an unencoded application_key can trigger a base64 decode error. Server should helpfully check if the key is raw format or at least fail out with a better message indicating the error.