snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

apps/meteor/server/services/push/logger.ts

@@ -0,0 +1,3 @@
+import { Logger } from '@rocket.chat/logger';
+
+export const logger = new Logger('Push');

apps/meteor/server/services/push/service.ts

@@ -0,0 +1,57 @@
+import type { IPushService } from '@rocket.chat/core-services';
+import { ServiceClassInternal } from '@rocket.chat/core-services';
+import type { IPushToken, Optional } from '@rocket.chat/core-typings';
+import { PushToken } from '@rocket.chat/models';
+
+import { logger } from './logger';
+import { registerPushToken } from './tokenManagement/registerPushToken';
+
+export class PushService extends ServiceClassInternal implements IPushService {
+	protected name = 'push';
+
+	constructor() {
+		super();
+
+		this.onEvent('watch.users', async (data) => {
+			// for some reason data.diff can be set to undefined
+			if (!('diff' in data) || !data.diff || !('services.resume.loginTokens' in data.diff)) {
+				return;
+			}
+
+			const loginTokens = Array.isArray(data.diff['services.resume.loginTokens']) ? data.diff['services.resume.loginTokens'] : [];
+
+			if (data.diff['services.resume.loginTokens'] === undefined || loginTokens.length === 0) {
+				await PushToken.removeAllByUserId(data.id);
+				return;
+			}
+			const tokens = loginTokens.map(({ hashedToken }: { hashedToken: string }) => hashedToken);
+			if (tokens.length > 0) {
+				await PushToken.removeByUserIdExceptTokens(data.id, tokens);
+			}
+		});
+	}
+
+	async registerPushToken(
+		data: Optional<Pick<IPushToken, '_id' | 'token' | 'authToken' | 'appName' | 'userId' | 'metadata'>, '_id' | 'metadata'>,
+	): Promise<Omit<IPushToken, 'authToken'>> {
+		const tokenId = await registerPushToken(data);
+
+		const removeResult = await PushToken.removeDuplicateTokens({
+			_id: tokenId,
+			token: data.token,
+			appName: data.appName,
+			authToken: data.authToken,
+		});
+		if (removeResult.deletedCount) {
+			logger.debug({ msg: 'Removed existing app items', removed: removeResult.deletedCount });
+		}
+
+		const updatedDoc = await PushToken.findOneById<Omit<IPushToken, 'authToken'>>(tokenId, { projection: { authToken: 0 } });
+		if (!updatedDoc) {
+			logger.error({ msg: 'Could not find PushToken document on mongo after successful operation', tokenId });
+			throw new Error('could-not-find-token-document');
+		}
+
+		return updatedDoc;
+	}
+}

apps/meteor/server/services/push/tokenManagement/findDocumentToUpdate.ts

@@ -0,0 +1,22 @@
+import type { IPushToken } from '@rocket.chat/core-typings';
+import { PushToken } from '@rocket.chat/models';
+
+export async function findDocumentToUpdate(data: Partial<IPushToken>): Promise<IPushToken | null> {
+	if (data._id) {
+		const existingDoc = await PushToken.findOneById(data._id);
+		if (existingDoc) {
+			return existingDoc;
+		}
+	}
+
+	// VoIP tokens MUST match the id
+	if (data.voipToken) {
+		return null;
+	}
+
+	if (data.token && data.appName) {
+		return PushToken.findOneByTokenAndAppName(data.token, data.appName);
+	}
+
+	return null;
+}

apps/meteor/server/services/push/tokenManagement/registerPushToken.ts

@@ -0,0 +1,68 @@
+import type { IPushToken, Optional } from '@rocket.chat/core-typings';
+import { PushToken } from '@rocket.chat/models';
+
+import { findDocumentToUpdate } from './findDocumentToUpdate';
+import { logger } from '../logger';
+
+export type PushTokenData = Optional<
+	Pick<IPushToken, '_id' | 'token' | 'authToken' | 'appName' | 'userId' | 'metadata' | 'voipToken'>,
+	'_id' | 'metadata'
+>;
+
+function canModifyTokenDocument(doc: IPushToken, data: Partial<IPushToken>): boolean {
+	// If there's no voip on either side of the operation, any doc can be updated
+	if (!doc.voipToken && !data.voipToken) {
+		return true;
+	}
+
+	// VoIP tokens MUST be referenced by id, so if there's no id on the data, do not let this doc be changed
+	if (!data._id || data._id !== doc._id) {
+		return false;
+	}
+
+	return true;
+}
+
+async function insertToken(data: PushTokenData): Promise<IPushToken['_id']> {
+	const insertResult = await PushToken.insertToken({
+		...(data._id && { _id: data._id }),
+		token: data.token,
+		authToken: data.authToken,
+		appName: data.appName,
+		userId: data.userId,
+		...(data.metadata && { metadata: data.metadata }),
+		...(data.voipToken && data._id && { voipToken: data.voipToken }),
+	});
+
+	const { authToken: _, ...dataWithNoAuthToken } = data;
+	logger.debug({ msg: 'Push token added', dataWithNoAuthToken, insertResult });
+
+	return insertResult.insertedId;
+}
+
+async function updateToken(doc: IPushToken, data: PushTokenData): Promise<IPushToken['_id']> {
+	const updateResult = await PushToken.refreshTokenById(doc._id, {
+		token: data.token,
+		authToken: data.authToken,
+		appName: data.appName,
+		userId: data.userId,
+		...(data.voipToken && { voipToken: data.voipToken }),
+	});
+
+	if (updateResult.modifiedCount) {
+		const { authToken: _, ...dataWithNoAuthToken } = data;
+		logger.debug({ msg: 'Push token updated', dataWithNoAuthToken, updateResult });
+	}
+
+	return doc._id;
+}
+
+export async function registerPushToken(data: PushTokenData): Promise<IPushToken['_id']> {
+	const doc = await findDocumentToUpdate(data);
+
+	if (!doc || !canModifyTokenDocument(doc, data)) {
+		return insertToken(data);
+	}
+
+	return updateToken(doc, data);
+}