以下图如示安全
就是APP的服务端在用户未打开APP进程时,还能发通知给用户APP的服务技术app
Provider:提供推送的第三方服务系统iphone
Device:苹果设备,例如iphone和ipad等ide
APNS:苹果推送消息服务,属于苹果的服务网站
APP:安装在苹果设备上的应用程序ui
DeviceToken:设备的标识,用于肯定接收通知的设备及APP加密
Payload:推送消息的传输形式code
从上图能够看出Provider与APNS之间是要创建链接的,APNS和Device之间也是要创建链接的,这两个链接都是加密的,采用的TLS的方式,加密用的证书是在苹果官方网站上购买生成的,这个证书分两种,一种是“开发者证书”,使用开发者证书的APP能够发布在APPSTORE上面,开发者证书的使用费是每一年99美圆,另外一种是“企业证书”,使用企业证书的APP只能发在企业内部市场,不能发在APPSTORE上,企业证书的年费是299美圆,企业证书对安装人数是没有限制的,但开发者证书对APP的安装人数是有限制的,但从APPSTORE上安装则没有限制。orm
安全链接的创建方式如图:token
Provider如何取得DeviceToken呢?具体如图所示:
获取是由APP经过注册服务后取得DeviceToken,而后传给Provider。因为这个DeviceToken是会变的,因此最好是APP在每次启动时都能注册一下,获取最新的DeviceToken
IOS下的注册获取DeviceToken的代码官方给出以下:
- (void)applicationDidFinishLaunching:(UIApplication *)app {// other setup tasks here.... [[UIApplication sharedApplication] registerForRemoteNotificationTypes:(UIRemoteNotificationTypeBadge | UIRemoteNotificationTypeSound)]; } // Delegation methods - (void)application:(UIApplication *)app didRegisterForRemoteNotificationsWithDeviceToken:(NSData *)devToken { const void *devTokenBytes = [devToken bytes]; self.registered = YES; [self sendProviderDeviceToken:devTokenBytes]; // custom method } - (void)application:(UIApplication *)app didFailToRegisterForRemoteNotificationsWithError:(NSError *)err { NSLog(@"Error in registration. Error: %@", err); }
Provider和APNS之间是一个安全的Socket链接,传输的是规定格式的二进制数据,以下形式
固然,这个就是TCP报文,然而具体的报文又有好几种,有发送普通消息的传输形式,有获取错误响应的传输形式,还有获取反馈的报文形式等,对于普通的发消息的报文格式如图如示:
最前面1个字节是命令类型,2-3字节是DeviceToken的长度,后面是DeviceToken的具体值,后面是消息的长度和消息的具体内容。发完消息后,在关闭Socket前还能够查看错误的响应,以便确认消息是否成功地发给APNS,错误响应的报文以下:
命令为8的表示是错误响应的报文,Status是错误码,Identifier是用于定位具体的哪条推送消息,这个是加强型通知里的传入的值,首先看下苹果都有哪些返回错误码:
再看下Identifier传入使用的加强型的通知报文格式:
官方给出发送普通消息的C++代码以下:
static bool sendPayload(SSL *sslPtr, char *deviceTokenBinary, char *payloadBuff, size_t payloadLength){ bool rtn = false; if (sslPtr && deviceTokenBinary && payloadBuff && payloadLength){ uint8_t command = 0; /* command number */ char binaryMessageBuff[sizeof(uint8_t) + sizeof(uint16_t) + DEVICE_BINARY_SIZE + sizeof(uint16_t) + MAXPAYLOAD_SIZE]; /* message format is, |COMMAND|TOKENLEN|TOKEN|PAYLOADLEN|PAYLOAD| */ char *binaryMessagePt = binaryMessageBuff; uint16_t networkOrderTokenLength = htons(DEVICE_BINARY_SIZE); uint16_t networkOrderPayloadLength = htons(payloadLength); /* command */ *binaryMessagePt++ = command; /* token length network order */ memcpy(binaryMessagePt, &networkOrderTokenLength, sizeof(uint16_t)); binaryMessagePt += sizeof(uint16_t); /* device token */ memcpy(binaryMessagePt, deviceTokenBinary, DEVICE_BINARY_SIZE); binaryMessagePt += DEVICE_BINARY_SIZE; /* payload length network order */ memcpy(binaryMessagePt, &networkOrderPayloadLength, sizeof(uint16_t)); binaryMessagePt += sizeof(uint16_t); /* payload */ memcpy(binaryMessagePt, payloadBuff, payloadLength); binaryMessagePt += payloadLength; if (SSL_write(sslPtr, binaryMessageBuff, (binaryMessagePt - binaryMessageBuff)) > 0) rtn = true; } return rtn; }
发送加强的通知消息的代码:
static bool sendPayload(SSL *sslPtr, char *deviceTokenBinary, char *payloadBuff, size_t payloadLength){ bool rtn = false; if (sslPtr && deviceTokenBinary && payloadBuff && payloadLength){ uint8_t command = 1; /* command number */ char binaryMessageBuff[sizeof(uint8_t) + sizeof(uint32_t) + sizeof(uint32_t) + sizeof(uint16_t) + DEVICE_BINARY_SIZE + sizeof(uint16_t) + MAXPAYLOAD_SIZE]; /* message format is, |COMMAND|ID|EXPIRY|TOKENLEN|TOKEN|PAYLOADLEN|PAYLOAD|*/ char *binaryMessagePt = binaryMessageBuff; uint32_t whicheverOrderIWantToGetBackInAErrorResponse_ID = 1234; uint32_t networkOrderExpiryEpochUTC = htonl(time(NULL)+86400); // expire message if not delivered in 1 day uint16_t networkOrderTokenLength = htons(DEVICE_BINARY_SIZE); uint16_t networkOrderPayloadLength = htons(payloadLength); /* command */ *binaryMessagePt++ = command; /* provider preference ordered ID */ memcpy(binaryMessagePt, &whicheverOrderIWantToGetBackInAErrorResponse_ID, sizeof(uint32_t)); binaryMessagePt += sizeof(uint32_t); /* expiry date network order */ memcpy(binaryMessagePt, &networkOrderExpiryEpochUTC, sizeof(uint32_t)); binaryMessagePt += sizeof(uint32_t); /* token length network order */ memcpy(binaryMessagePt, &networkOrderTokenLength, sizeof(uint16_t)); binaryMessagePt += sizeof(uint16_t); /* device token */ memcpy(binaryMessagePt, deviceTokenBinary, DEVICE_BINARY_SIZE); binaryMessagePt += DEVICE_BINARY_SIZE; /* payload length network order */ memcpy(binaryMessagePt, &networkOrderPayloadLength, sizeof(uint16_t)); binaryMessagePt += sizeof(uint16_t); /* payload */ memcpy(binaryMessagePt, payloadBuff, payloadLength); binaryMessagePt += payloadLength; if (SSL_write(sslPtr, binaryMessageBuff, (binaryMessagePt - binaryMessageBuff)) > 0) rtn = true; } return rtn; }