{"action":"created","issue":{"url":"https://api.github.com/repos/ParsePlatform/parse-server/issues/396","repository_url":"https://api.github.com/repos/ParsePlatform/parse-server","labels_url":"https://api.github.com/repos/ParsePlatform/parse-server/issues/396/labels{/name}","comments_url":"https://api.github.com/repos/ParsePlatform/parse-server/issues/396/comments","events_url":"https://api.github.com/repos/ParsePlatform/parse-server/issues/396/events","html_url":"https://github.com/ParsePlatform/parse-server/issues/396","id":133414211,"number":396,"title":"validateMasterKey() call prevents Android SDK from registering for push notifications","user":{"login":"rogerhu","id":326857,"avatar_url":"https://avatars.githubusercontent.com/u/326857?v=3","gravatar_id":"","url":"https://api.github.com/users/rogerhu","html_url":"https://github.com/rogerhu","followers_url":"https://api.github.com/users/rogerhu/followers","following_url":"https://api.github.com/users/rogerhu/following{/other_user}","gists_url":"https://api.github.com/users/rogerhu/gists{/gist_id}","starred_url":"https://api.github.com/users/rogerhu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rogerhu/subscriptions","organizations_url":"https://api.github.com/users/rogerhu/orgs","repos_url":"https://api.github.com/users/rogerhu/repos","events_url":"https://api.github.com/users/rogerhu/events{/privacy}","received_events_url":"https://api.github.com/users/rogerhu/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-02-13T08:35:05Z","updated_at":"2016-02-14T01:58:52Z","closed_at":null,"body":"After https://github.com/ParsePlatform/parse-server/pull/311 got merged I started testing it again.  I started seeing \r\n\"Master key is invalid, you should only use master key to send push'\" on Parse push registrations.\r\n\r\nI don't believe the Android SDK has the ability to send a master key ( (https://www.parse.com/questions/using-master-key-with-android). so I had to disable this [line](https://github.com/ParsePlatform/parse-server/blob/master/src/Controllers/PushController.js#L17) to get push notifications registered.\r\n\r\nIs it possible to remove this validation until the Android/iOS SDK's enable this possibility?\r\n\r\n@wangmengyan95 "},"comment":{"url":"https://api.github.com/repos/ParsePlatform/parse-server/issues/comments/183792657","html_url":"https://github.com/ParsePlatform/parse-server/issues/396#issuecomment-183792657","issue_url":"https://api.github.com/repos/ParsePlatform/parse-server/issues/396","id":183792657,"user":{"login":"wangmengyan95","id":4666935,"avatar_url":"https://avatars.githubusercontent.com/u/4666935?v=3","gravatar_id":"","url":"https://api.github.com/users/wangmengyan95","html_url":"https://github.com/wangmengyan95","followers_url":"https://api.github.com/users/wangmengyan95/followers","following_url":"https://api.github.com/users/wangmengyan95/following{/other_user}","gists_url":"https://api.github.com/users/wangmengyan95/gists{/gist_id}","starred_url":"https://api.github.com/users/wangmengyan95/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wangmengyan95/subscriptions","organizations_url":"https://api.github.com/users/wangmengyan95/orgs","repos_url":"https://api.github.com/users/wangmengyan95/repos","events_url":"https://api.github.com/users/wangmengyan95/events{/privacy}","received_events_url":"https://api.github.com/users/wangmengyan95/received_events","type":"User","site_admin":false},"created_at":"2016-02-14T01:58:52Z","updated_at":"2016-02-14T01:58:52Z","body":"Hi @rogerhu, as we said in wiki, we do not officially support client push yet. The main reason is related to security. Since you will distribute the app with your clientKey, malicious users can use that to send push notifications to your app users if you enable client push. For Parse.com, we have the dashboard to remind you and allow you to change this setting. It is disabled by default. For open parse server, we simply disable the client push at the beginning. Compare to client push, we always recommend developers to use cloud functions to send push notifications.\r\nI will send a PR to allow you to enable client push when you initialize parse server later. Removing the checking does not have an effect on the push functionality, just be aware of the security issue I mention to you."}}