Fix MM 56723 (#26643) (#26866)

Automatic Merge

server/channels/app/notification_push.go

@@ -14,6 +14,7 @@ import (
 	"strings"
 	"sync"
 
+	"github.com/golang-jwt/jwt/v5"
 	"github.com/mattermost/mattermost/server/public/plugin"
 
 	"github.com/mattermost/mattermost/server/public/model"
@@ -27,6 +28,12 @@ type notificationType string
 type notifyPropsReason string
 type statusReason string
 
+type pushJWTClaims struct {
+	AckId    string `json:"ack_id"`
+	DeviceId string `json:"device_id"`
+	jwt.RegisteredClaims
+}
+
 const (
 	notificationTypeClear       notificationType = "clear"
 	notificationTypeMessage     notificationType = "message"
@@ -161,8 +168,26 @@ func (a *App) sendPushNotificationToAllSessions(msg *model.PushNotification, use
 		tmpMessage := msg.DeepCopy()
 		tmpMessage.SetDeviceIdAndPlatform(session.DeviceId)
 		tmpMessage.AckId = model.NewId()
+		signature, err := jwt.NewWithClaims(jwt.SigningMethodES256, pushJWTClaims{
+			AckId:    tmpMessage.AckId,
+			DeviceId: tmpMessage.DeviceId,
+		}).SignedString(a.AsymmetricSigningKey())
+
+		if err != nil {
+			a.NotificationsLog().Error("Notification error",
+				mlog.String("ackId", tmpMessage.AckId),
+				mlog.String("type", tmpMessage.Type),
+				mlog.String("userId", session.UserId),
+				mlog.String("postId", tmpMessage.PostId),
+				mlog.String("channelId", tmpMessage.ChannelId),
+				mlog.String("deviceId", tmpMessage.DeviceId),
+				mlog.String("status", err.Error()),
+			)
+			continue
+		}
+		tmpMessage.Signature = signature
 
-		err := a.sendToPushProxy(tmpMessage, session)
+		err = a.sendToPushProxy(tmpMessage, session)
 		if err != nil {
 			a.NotificationsLog().Error("Failed to send to push proxy",
 				mlog.String("type", model.TypePush),

server/public/model/push_notification.go

@@ -77,6 +77,7 @@ type PushNotification struct {
 	IsIdLoaded       bool        `json:"is_id_loaded"`
 	PostType         string      `json:"-"`
 	ChannelType      ChannelType `json:"-"`
+	Signature        string      `json:"signature"`
 }
 
 func (pn *PushNotification) DeepCopy() *PushNotification {