APNs(Apple Push Notification service)

Definition

Why It Matters

If you want to reach iOS users with push, APNs is not optional: every iOS notification, whether you send it yourself or through a vendor such as Firebase, OneSignal, Braze or Sequenzy, ends up as an APNs request. Knowing how APNs authenticates and reports errors explains most iOS push problems, from silent failures in production builds to tokens that stop working after a reinstall.

How It Works

You authenticate with either a token-based .p8 auth key (keys do not expire, but their topic and environment scope can vary) or a certificate-based .p12 file (one per app, renewed every year). Each request carries headers such as apns-topic (your bundle ID), apns-push-type (alert, background, liveactivity and others) and apns-priority, plus a JSON body whose aps dictionary holds the alert, sound and badge. Apple runs two environments: sandbox for development builds and production for TestFlight and App Store builds, and a token from one does not work in the other. Payloads are limited to 4 KB for regular notifications. When a token is no longer valid, APNs answers with status 410 so you can stop sending to it.

Example

{
  "aps": {
    "alert": {
      "title": "Your trial ends tomorrow",
      "body": "Keep your playlists with Premium."
    },
    "sound": "default",
    "mutable-content": 1
  },
  "deep_link": "myapp://paywall"
}

Best Practices

• 1Use a .p8 auth key instead of yearly .p12 certificates so pushes do not stop when a certificate expires
• 2Match the environment to the build, sandbox for Xcode debug builds and production for TestFlight and App Store
• 3Set apns-push-type correctly, since background and Live Activity pushes are rejected or throttled without it
• 4Keep payloads well under 4 KB, especially when merging personalized text
• 5Stop sending to tokens that return 410 Unregistered until the app registers them again; investigate environment or formatting for BadDeviceToken
• 6Store your key ID and team ID with the key, since you need all three to sign requests