Overview Version (1) Discussion (1)

• 

  [DigitalPoint] PWA

  This addon adds a few things that I felt were missing from XenForo's PWA app

  digitalpoint

  csrf

  pwa
  About this resource

  

  
  This addon adds a few things that I felt were missing from XenForo's PWA app:
  

  • If the user that is installing the PWA app is logged in, auto-log them into the PWA app (don't need to force users to log-in from scratch when they first load the installed app).
  • Use Sec-Fetch-Site header as replacement for CSRF with a fallback to CSRF if browser doesn't support Sec-Fetch-Site (prevent stale sessions from causing security error message)
  • Automatic refresh of badge counters when app is loaded/brought to front (this also applies to the site when being used in a normal browser)
  • Give more prominent push notification permission message when initially loading app (see screenshot for example)
  • Allow editing of of web app manifest JSON
  • Added ability to send push notices to users (Admin -> Communications -> Push users)
  • Adds option to enable debugging logging for things related to push notifications
  • Does some individually small things to try and keep push subscription records from being lost

  Some things to note:
  

  • In exchange for being free, this addon has a single attribution link buried on the bottom of XenForo's Help -> Privacy policy page (there are no site-wide or footer links).
• Version

  1.2.5.1 Stable Available Dec 7, 2025 · 0

  Download

  File size: 24.5 KB

  SHA-256: b80ac35188924053710dacfbb8353e7772022ae370549560ee5bbf3efdc588d0

  SHA-256 verified Package valid Compatibility checked Last verified: Wednesday at 12:10 AM

  View attachment 1940​

  
  This addon adds a few things that I felt were missing from XenForo's PWA app:
  

  • If the user that is installing the PWA app is logged in, auto-log them into the PWA app (don't need to force users to log-in from scratch when they first load the installed app).
  • Use Sec-Fetch-Site header as replacement for CSRF with a fallback to CSRF if browser doesn't support Sec-Fetch-Site (prevent stale sessions from causing security error message)
  • Automatic refresh of badge counters when app is loaded/brought to front (this also applies to the site when being used in a normal browser)
  • Give more prominent push notification permission message when initially loading app (see screenshot for example)
  • Allow editing of of web app manifest JSON
  • Added ability to send push notices to users (Admin -> Communications -> Push users)
  • Adds option to enable debugging logging for things related to push notifications
  • Does some individually small things to try and keep push subscription records from being lost

  Some things to note:
  

  • In exchange for being free, this addon has a single attribution link buried on the bottom of XenForo's Help -> Privacy policy page (there are no site-wide or footer links).
• Discussion

  This resource has a discussion thread on the forum where you can ask questions, report issues, and talk with the author and other users.

  Join the discussion (1)