Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-78054

Encrypted mobile notifications: payload can be encrypted several times

    XMLWordPrintable

Details

    • MOODLE_402_STABLE
    • MOODLE_402_STABLE
    • MDL-78054-402
    • MDL-78054-master
    • Hide

      Setup

      1. Ensure that your site is available globally (e.g. use ngrok)
      2. Register with the Airnotifier service (https://apps.moodle.com/)
      3. Navigate to Site administration -> Messaging -> Mobile
      4. Put the Airnotifier access key in place
      5. Ensure that the setting `message_airnotifier | encryptnotifications` is on
      6. Ensure that you have a course with the following enrolled:
        • Your admin user
        • A student user
      7. Login to the site on the app using a student account
      8. Open the "Messaging" app
      9. Choose the "Settings" cog icon
      10. Ensure that the "Mobile" checkbox is ticked
      11. Install the .apk file (available in MDL-76722) in two Android devices.
      12. Login with the student account in the app in both devices.
      13. On the site as the admin, send a private message to the student account
        1. Confirm the expected notification message arrived on both mobile device and you can read the text (it doesn't appear encrypted).
      Show
      Setup Ensure that your site is available globally (e.g. use ngrok) Register with the Airnotifier service ( https://apps.moodle.com/ ) Navigate to Site administration -> Messaging -> Mobile Put the Airnotifier access key in place Ensure that the setting `message_airnotifier | encryptnotifications` is on Ensure that you have a course with the following enrolled: Your admin user A student user Login to the site on the app using a student account Open the "Messaging" app Choose the "Settings" cog icon Ensure that the "Mobile" checkbox is ticked Install the .apk file (available in MDL-76722 ) in two Android devices. Login with the student account in the app in both devices. On the site as the admin, send a private message to the student account Confirm the expected notification message arrived on both mobile device and you can read the text (it doesn't appear encrypted).

    Description

      If a user has several devices configured, the payload of the notification will be encrypted several times, make it impossible for some of the devices to decrypt it. The payload is encrypted for the first device, and then the second device uses the encrypted data as a base instead of using the plain message, so it's encrypting an already encrypted message.

      Attachments

        Issue Links

          Activity

            People

              dpalou Dani Palou
              dpalou Dani Palou
              Juan Leyva Juan Leyva
              Andrew Lyons Andrew Lyons
              Andrew Lyons Andrew Lyons
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 5 hours, 40 minutes
                  5h 40m

                  Clockify

                    Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.