jerry/buzz
1
0
Fork 0
mirror of https://github.com/block/buzz.git synced 2026-11-13 04:41:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(mobile/ios): align Apple app identities

Browse Source 
Co-authored-by: Tom Brow <tomb@block.xyz>
Signed-off-by: Tom Brow <tomb@block.xyz>
This commit is contained in:
npub12wpjffj7q5qjsky5jvk4ldwlxmse5xll3d8gytk4wqd0c5y7jvwspg37n6
2026-07-31 15:56:53 -07:00
parent 737457569a
commit 4f86c6cbc5
9 changed files with 76 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
docs/push-gateway-deployment.md
View File

@@ -24,6 +24,13 @@
| `BUZZ_PUSH_GRANT_KEYS` | Capability AEAD keyring, `id:base64-32-bytes[,predecessor...]`; current key first. |
| `BUZZ_PUSH_TOKEN_KEYS` | Independent token-custody AEAD keyring in the same format. Never reuse grant keys. |
Each gateway deployment represents exactly one Apple team and bundle-id pair:
`BUZZ_PUSH_APP_ATTEST_APP_ID` and `BUZZ_PUSH_APNS_TOPIC` are scalar startup
settings, and the mounted APNs certificate must match that topic. Dogfood
(`JMTDPW9CG3` / `xyz.block.buzz.dogfood.mobile`) and production
(`EYF346PHUG` / `xyz.block.buzz.mobile`) therefore require separate gateway
deployments with their own matching settings and credentials.
Optional endpoint quota policy variables are `BUZZ_PUSH_ENDPOINT_QUOTA_WINDOW_SECONDS` (default `10`, max `86400`) and `BUZZ_PUSH_ENDPOINT_QUOTA_MAX_DELIVERIES` (default `10`, max `10000`). These are Buzz policy hypotheses, not Apple-published limits; tune under load while retaining a hard ceiling.
## Secret and key rotation rules