May 18, 2020 By Prashanth Bhat 2 min read

IBM Cloud Push Notifications helps deliver timely and relevant notifications to mobile devices and browsers.

Notifications can be targeted to all application users or to a specific set of users and devices using tags. Insights can be obtained on delivery and receipt of notifications to the targeted users.

IBM Push Notifications offers a rich set of APIs that can be accessed from your backend server applications or client applications to consume some of the capabilities, such as tags, subscriptions, and web hooks.

The Push Notifications APIs are secured using one of the following two methods:

  • clientSecret: The clientSecret protects APIs that are typically started by mobile client applications. The clientSecret is allocated to every service instance at the time of binding an application with Push Notifications service.
  • API Keys: Application programming interface keys (API keys) are available through Cloud IAM for you to use in order to authenticate. These API keys are provided through Cloud IAM.

REST API documentation provides information on the APIs that use clientSecret versus the APIs which use Cloud IAM-based authentication tokens.

Change in authentication type

In order to improve the security for our APIs, we are announcing the change of the authentication type from clientSecret to Cloud IAM based authentication for the following APIs.

  1. GET /apps/{applicationId}/settings/webpushServerKey
  2. GET /apps/{applicationId}/devices 
  3. GET /apps/{applicationId}/messages/{messageId}/deliverystatus 

Note: The three APIs mentioned above currently support the use of both clientSecret as well as IAM-based tokens for authentication. Due to security considerations, we will deprecate the use of clientSecret as an authentication type for these APIs as of August 30, 2020.

Action required

Review your usage of the Push Notification service APIs to check if you are using any of the three APIs mentioned above.

If you are still using clientSecret for authentication with these APIs,  you should immediately move to use IAM-based tokens for authentication as the clientSecret will be removed as an authentication option.

More from Announcements

IBM and SAP unlock business and industry value with new generative AI solutions 

3 min read - IBM Consulting is delivering on our commitment to co-innovate with SAP and collaborate with our clients. As part of our Value Generation Partnership initiative announced earlier this month with SAP, we are releasing the first 10 of 100 planned AI solutions to help clients transform their industries, optimize their business processes and successfully deliver their SAP programs.  Delivering AI business and industry innovation at scale  With the recently announced Value Generation Partnership initiative, IBM and SAP are co-innovating intelligent industry…

IBM SevOne 7.0: Reaching application-centric multicloud network observability  

2 min read - As enterprises increasingly rely on network connectivity to support cloud-based applications and remote workers, network managers require new methods to monitor and safeguard connectivity across diverse environments, including corporate networks, software-defined WANs and multiple public cloud providers.   According to the recent EMA Network Megatrends Report, responding network professionals believe that 53% of network outages and performance issues could be prevented with improved network management tools, yet only 9% find it very easy to hire skilled networking personnel. This is why…

IBM Hybrid Cloud Mesh and Red Hat Service Interconnect: A new era of app-centric connectivity 

2 min read - To meet customer demands, applications are expected to be performing at their best at all times. Simultaneously, applications need to be flexible and cost effective, and therefore supported by an underlying infrastructure that is equally reliant, performant and secure as the applications themselves.   Easier said than done. According to EMA's 2024 Network Management Megatrends report only 42% of responding IT professionals would rate their network operations as successful.   In this era of hyper-distributed infrastructure where our users, apps, and data…

IBM Newsletters

Get our newsletters and topic updates that deliver the latest thought leadership and insights on emerging trends.
Subscribe now More newsletters