@geolonia/geonicdb-sdk 0.19.3 → 0.21.0

package/README.md

@@ -403,11 +403,13 @@ try {
 Calling `registerWebPushSubscription()` again reuses the id stored in `localStorage` when the
 broker still has that subscription (`GET` → 200) and does not `POST`. After a VAPID key rotation
 that changes the push endpoint, it `PATCH`es `notification.webpush` / `endpoint.webpush` instead
-of creating a new subscription. The default key is `baseUrl` + `tenant` + `protocol`; for shared
-browsers or multiple distinct filters, pass `storageKey` that still includes that scope (e.g.
-append `:${userId}:${filterId}` to `buildWebPushSubscriptionStorageKey(...)`). Concurrent calls with the same
-key share one in-flight Promise. HTTP 507 (`QuotaExceededError`) requires deleting unused
-subscriptions or changing the plan — waiting alone will not clear the quota.
+of creating a new subscription. The default key is `baseUrl` + `tenant` + `protocol` only — **not**
+login principal. On a shared browser / kiosk (or when registering multiple distinct filters),
+pass `storageKey` that still includes that scope plus app-managed suffixes (e.g. append
+`:${userId}:${filterId}` to `buildWebPushSubscriptionStorageKey(...)`); otherwise a later user
+can reuse the earlier subscription id and the new subject is ignored (#3097). Concurrent calls
+with the same key share one in-flight Promise. HTTP 507 (`QuotaExceededError`) requires deleting
+unused subscriptions or changing the plan — waiting alone will not clear the quota.
 
 Low-level helpers remain available: `subscribeWebPush()` + `toNgsiv2WebPushNotification()` /
 `toNgsiLdWebPushEndpoint()` + `request('POST', ...)`.