Vapid Key

Description

General

• Documentation: https://datatracker.ietf.org/doc/html/rfc8292
• Summary: VAPID (Voluntary Application Server Identification) is an open web standard (RFC 8292) that enables application servers to identify and authenticate themselves with web push services such as Mozilla Push Service or Firebase Cloud Messaging. The credentials allow authenticated delivery of Web Push notifications and establish trust between the application server and the push service.

Revoke the secret

VAPID keys are locally generated elliptic curve (P-256) key pairs and cannot be revoked through a centralized API. Access can only be revoked by rotating the key pair generating a new private and public key, updating the public key in the push service configuration, and deleting any references to the previous private key.

Details for Vapid Key

• Family: token

• Category: messaging_system

• High recall: False

• Validity check available: False

• Analyzer available: False

• Revoker available: False

• Minimum number of matches: 2

• Occurrences found for one million commits: 1.6

• Prefixed: False