Push Notifications

TL;DR — JWT-authenticated HTTP/2 requests to Apple's APNs endpoint. Token-based auth (no certificates needed).

APNs token auth

HowlAlert uses APNs token-based authentication:

1. Generate a JWT signed with your .p8 private key
2. Include it as Authorization: bearer {jwt} in APNs requests
3. JWTs are valid for 1 hour — regenerate as needed

Required credentials

Configure these as Worker secrets via wrangler secret put:

Secret	Description
APNS_KEY_ID	10-character Key ID from Apple Developer
APNS_TEAM_ID	10-character Team ID
APNS_PRIVATE_KEY	Contents of your .p8 file
APNS_BUNDLE_ID	App bundle ID (e.g. com.mrdemonwolf.howlalert.ios)