Suggestion: Send to predefined users ID about notifier HOT 8 CLOSED

Yes, BUT if i change N in data.id.includes(N) i can see not mine data

from notifier.

No! you should not change it there, but you can change in $suersID
here : $userID = [1,2,3];
It works fine for me, just create two users, and set one userID. you'll receive notification for just this one.

from notifier.

i mean this is vulnerability

from notifier.

Ok I updated it :
in app.js :

socket.addEventListener('message', function (event) {
        if(JSON.parse(event.data).data.id.includes(window.Laravel.userID))
        {
            toastr.info(JSON.parse(event.data).data.content, JSON.parse(event.data).data.title);
        }
    });

In main blade:

<script>
       window.Laravel = {!! json_encode([
           'csrfToken' => csrf_token(),
           'userID' =>  auth()->id()
       ]) !!};        
   </script>

Of course you should install node & npm and then run : npm run dev

May this helps ^^'

from notifier.

i don't understand 😀
it still vulnerability.
should "think" a way without any id on client side logic

from notifier.

No ! it's Laravel way to use Vue.js !
this code :

socket.addEventListener('message', function (event) {
        if(JSON.parse(event.data).data.id.includes(window.Laravel.userID))
        {
            toastr.info(JSON.parse(event.data).data.content, JSON.parse(event.data).data.title);
        }
    });

doesn't appear in client side !

from notifier.

Otherwise we're waiting for you to get a solution for this and also to send notifier to all urls ^^'

from notifier.

Hi. you can review last release.
now you need to add @include('notifier::connect') to your main layout to use it on all pages.
and without this including client will not connect to socked server at all, i removed auto connection.

from notifier.