Notifications And Push Failures

SymptomLikely causeFix
Permission prompt does not appearNot called from user gesture or browser quiet UIAsk from explicit action after explaining value
Permission deniedUser denied or browser blocked promptsRespect denial and show settings instructions
Subscribe failsMissing service worker, bad VAPID key, unsupported browserVerify navigator.serviceWorker.ready and key format
Push sent but no notificationWorker push handler missing or payload errorLog push event and call showNotification()
Click opens wrong pageMissing notificationclick route dataStore target URL in notification data
Notifications work on desktop but not mobilePlatform support differenceTest target OS/browser and provide alternate channel
Subscription stops workingExpired or invalid subscriptionRemove failed subscriptions and ask user to resubscribe

Security Checks

  • Subscription endpoint requires auth.
  • CSRF protection exists where cookies are used.
  • Subscription secrets are not logged.
  • Users can disable notifications.
  • Notification payload does not expose sensitive data on lock screen.