Send push notifications to mobile apps via Google's Firebase Cloud Messaging — on post publish or via a notification composer.

rafael145a

<p><strong>RafaelMarreca Push Dispatch</strong> connects your WordPress site to your mobile app by sending notifications through Google’s Firebase Cloud Messaging (FCM HTTP v1) service. No PHP SDK, no Guzzle, no external PHP dependencies — just the WordPress HTTP API and the OpenSSL extension.</p>
<h4>How it works</h4>
<ul>
<li>Uses <strong>topic subscriptions</strong> — your mobile app calls <code>subscribeToTopic()</code> for each topic it wants to receive. No device tokens are stored, no PII is collected, no extra database tables are created.</li>
<li>When a post is published, the <strong>primary category</strong> determines the topic name (configurable via Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> RafaelMarreca Push Dispatch).</li>
<li>A dedicated <strong>notification composer</strong> (custom post type) lets you send manual push notifications with a custom title, body, topic, and optional deep link — without creating a real post.</li>
</ul>
<h4>Features</h4>
<ul>
<li>OAuth2 JWT authentication (RS256) for FCM HTTP v1</li>
<li>Automatic push on post publish, mapped by category</li>
<li>Manual notification composer with live phone preview and character counters</li>
<li>Deep link support (any custom URL scheme)</li>
<li>OAuth2 access token cached for 55 minutes to minimise round-trips</li>
<li>Service account JSON stored outside the database with <code>.htaccess</code> deny + chmod 600</li>
<li>Idempotent dispatch — republishing never resends</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>A Firebase project with Cloud Messaging enabled</li>
<li>A Firebase service account JSON (downloaded from the Firebase Console)</li>
<li>PHP <code>openssl</code> extension (bundled with most hosts)</li>
<li>Your mobile app must call <code>subscribeToTopic()</code> for each topic</li>
</ul>
<h3>Disclaimer</h3>
<p>Firebase, Firebase Cloud Messaging and Google are trademarks of Google LLC. This plugin is an independent, third-party integration and is not affiliated with, endorsed by, or sponsored by Google LLC.</p>
<h3>Service Account Setup</h3>
<p>In the Firebase Console: ⚙ <strong>Project settings</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> <strong>Service accounts</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> <strong>Generate new private key</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> download the JSON <span aria-hidden="true" class="wp-exclude-emoji">→</span> upload it in the plugin settings.</p>
<p>The file is stored in <code>wp-content/uploads/rafaelmarreca-push-private/</code> with <code>.htaccess</code> deny rules and chmod 600. It is never stored in the database.</p>
<h3>Mobile App Setup</h3>
<p>Your app needs to call <code>subscribeToTopic(getMessaging(), '<topic-name>')</code> to receive notifications for a given topic. The Firebase Cloud Messaging v1 API delivers to zero devices if no device is subscribed.</p>
<p>Example (React Native / Firebase JS SDK):<br />
    await messaging().subscribeToTopic(‘all’);</p>
<h3>External services</h3>
<p>This plugin relies on two external services operated by Google LLC in order to deliver push notifications. Both are part of the <strong>Google Cloud / Firebase</strong> platform. The plugin will not send any data to them until you configure it with a Firebase service account JSON and either publish a post (with auto-send enabled), publish a notification via the composer, or click “Send test” on the settings page.</p>
<h4>1. Google OAuth2 (oauth2.googleapis.com)</h4>
<ul>
<li><strong>What it is and what it is used for:</strong> Google’s OAuth2 token service. The plugin needs a short-lived access token to authenticate against Firebase Cloud Messaging. To obtain it, the plugin signs a JWT locally with the private key from your service account JSON and exchanges it for an access token.</li>
<li><strong>When data is sent:</strong> Once when the cached access token expires (every 55 minutes) and on the first send action.</li>
<li><strong>What data is sent:</strong> A POST request to <code>https://oauth2.googleapis.com/token</code> containing the OAuth2 <code>urn:ietf:params:oauth:grant-type:jwt-bearer</code> grant and a signed JWT. The JWT contains your service account’s <code>client_email</code>, the scope <code>https://www.googleapis.com/auth/firebase.messaging</code>, the audience URL, and issued-at/expiration timestamps. <strong>No WordPress user data, no post content, and no visitor data is sent.</strong></li>
<li><strong>Provider:</strong> Google LLC</li>
<li><strong>Terms of service:</strong> https://policies.google.com/terms</li>
<li><strong>Privacy policy:</strong> https://policies.google.com/privacy</li>
</ul>
<h4>2. Firebase Cloud Messaging (fcm.googleapis.com)</h4>
<ul>
<li><strong>What it is and what it is used for:</strong> Google’s push notification delivery service. The plugin uses the FCM HTTP v1 API to publish a notification to a topic that your mobile app has subscribed to.</li>
<li><strong>When data is sent:</strong> Every time a notification is dispatched — that is, when a post is published (with the auto-send option enabled), when a notification is published via the “Notifications” composer, or when the administrator clicks “Send test” on the settings page.</li>
<li><strong>What data is sent:</strong> A POST request to <code>https://fcm.googleapis.com/v1/projects/{your_project_id}/messages:send</code> containing: the destination topic name (e.g. “news”), the notification title (max 65 chars) and body (max 140 chars) you typed or that were extracted from your post, an optional deep link URL (when set in the composer), and the post ID / slug / category ID as plain identifiers in the data payload. <strong>No WordPress user data, no IP addresses, and no device identifiers are sent.</strong></li>
<li><strong>Provider:</strong> Google LLC</li>
<li><strong>Terms of service:</strong> https://policies.google.com/terms</li>
<li><strong>Firebase-specific terms:</strong> https://firebase.google.com/terms</li>
<li><strong>Privacy policy:</strong> https://policies.google.com/privacy</li>
</ul>
<p>By configuring the plugin with your Firebase service account JSON and publishing posts or notifications, you agree to the Google Terms of Service, the Firebase Terms of Service, and the Google Privacy Policy linked above.</p>


Alternatives to RafaelMarreca Push Dispatch for Firebase Cloud Messaging

Top alternatives