When I unauthorize an app, in some cases the server seems to still send POST's for notifications to the tent_notification_url the app has set.
(Happened with tent.is server for ^marco.tent.is)
This might be tent.is related… I've observed receiving notifications twice for some posts too…
Yeah, there may have been webhooks that were queued before the app was unauthorized. Do you continue to receive notifications?
Duplicate notifications should be dealt with gracefully, there is no guarantee that a notification will only be delivered once.
I am still receiving them.
Fix: Deleting app/app authorization
- delete app_authorizations when deleteing app
- delete notification_subscriptinos when deleting app authorization
I'll need some more information in order to debug this further—either the app id or tent_notification_url.
I thought this must be due to a subscription sticking around after the authorization was deleted, but there don't appear to be any orphans in the database; And the subscription model doesn't send the notification if it's orphaned.
Found and deleted the orphaned authorization; Your app shouldn't be receiving any more notifications from it and 27925c0 will prevent this from happening again.