OWASP / OWASP/Nest

Core Notification Infrastructure & Snapshot Triggers

Open
#3,637 2 comments 0 reactions 1 assignee Claimed by @Shofikul-Isl4m View on GitHub
bug enhancement
Dominant language
Python
Stars
451
Forks
707
Avg merge
22h 59m
Merged PRs (30d)
91

Description

Implement the foundational infrastructure for the OWASP Nest notification system as part of #3227.

Image

### Tasks
- [x] Implement `Subscription` and `Notification` models with GenericForeignKey support.
- [x] Configure Redis Stream (`owasp_notifications`) for event-driven messaging.
- [x] Implement a reliable Worker using Redis Consumer Groups and `XACK`.
- [x] Implement a robust Worker with PEL recovery (startup crash protection) and exponential backoff.
- [x] Add Dead Letter Queue (DLQ) with finite retries to prevent infinite loops.
- [x] Implement transition-aware Signal logic to prevent duplicate notification spam.
- [x] Add distributed locking to ensure safe, concurrent DLQ processing.
- [x] Support console-based email stimulation for local development.

This provides a "channel-agnostic" base that can easily be extended to other distribution channels

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.