py-vapid

import os import time from py_vapid import Vapid01 # --- 1. Generate VAPID keys (if you don't have them) --- # In a real application, you would generate these once and store them securely. # For this example, we'll generate them in memory. vapid_instance = Vapid01() vapid_instance.generate_keys() private_key_pem = vapid_instance.private_key.private_bytes( encoding=os.environ.get('VAPID_ENCODING', 'PEM').encode('utf-8'), format=os.environ.get('VAPID_FORMAT', 'PKCS8').encode('utf-8'), encryption_algorithm=os.environ.get('VAPID_ENCRYPTION_ALG', 'NoEncryption').encode('utf-8') ).decode('utf-8') public_key_pem = vapid_instance.public_key.public_bytes( encoding=os.environ.get('VAPID_ENCODING', 'PEM').encode('utf-8'), format=os.environ.get('VAPID_FORMAT', 'SubjectPublicKeyInfo').encode('utf-8') ).decode('utf-8') print("Generated Private Key (PEM format):\n", private_key_pem) print("Generated Public Key (PEM format):\n", public_key_pem) # --- 2. Load keys and sign claims --- # In a real app, you'd load private_key_pem from a secure store. vapid = Vapid01.from_pem(private_key_pem.encode('utf-8')) # Define claims required for VAPID # 'sub' is the email address of the sender, must be prefixed with 'mailto:' # 'aud' is the audience (the push service endpoint's origin) # 'exp' is the expiration time (Unix timestamp), max 24 hours. If omitted, py-vapid sets it to 24 hours. claims = { "sub": os.environ.get('VAPID_CONTACT', 'mailto:webpush@example.com'), "aud": os.environ.get('VAPID_AUDIENCE', 'https://fcm.googleapis.com'), # Example push service audience "exp": int(time.time()) + 12 * 60 * 60 # Expires in 12 hours } # Sign the claims to generate VAPID headers vapid_headers = vapid.sign(claims) print("\nGenerated VAPID Headers:") for header, value in vapid_headers.items(): print(f" {header}: {value}") # The 'Authorization' header contains the JWT, and 'Crypto-Key' contains the public key. # These headers are then sent with your Web Push request.