[PM-32477]PremiumStatusChanged Push Notification by cyprain-okeke · Pull Request #7198 · bitwarden/server

cyprain-okeke · 2026-03-11T12:38:27Z

🎟️ Tracking

https://bitwarden.atlassian.net/browse/PM-32477

📔 Objective

Summary
Implement premium-status push notifications across billing flows so clients stay in sync whenever a user’s premium state changes.

Details

New adapter API for premium changes

Extend IPushNotificationAdapter with NotifyPremiumStatusChangedAsync(User user).
Implement in PushNotificationAdapter by delegating to IPushNotificationService.PushPremiumStatusChangedAsync(user).

Stripe payment and subscription handlers

PaymentSucceededHandler
- Inject IUserRepository.
- After EnablePremiumAsync(userId, subscription.GetCurrentPeriodEnd()), load the user and call NotifyPremiumStatusChangedAsync(user) so successful payments trigger a premium-status push.

SubscriptionDeletedHandler

Inject IUserRepository and IPushNotificationAdapter.
When a user subscription is deleted (userId present), call DisablePremiumAsync and then fetch the user and send NotifyPremiumStatusChangedAsync(user).

SubscriptionUpdatedHandler

Inject IUserRepository and IPushNotificationAdapter.
In DisableSubscriberAsync user branch: disable premium, fetch the user, then call NotifyPremiumStatusChangedAsync(user).
In EnableSubscriberAsync user branch: enable premium, fetch the user, then call NotifyPremiumStatusChangedAsync(user).

Premium subscription commands

CreatePremiumCloudHostedSubscriptionCommand
- After saving the user and PushSyncVaultAsync(user.Id), call PushPremiumStatusChangedAsync(user) so new/updated cloud subscriptions immediately push the status change.
CreatePremiumSelfHostedSubscriptionCommand
After writing the license and saving the user, call PushPremiumStatusChangedAsync(user) to broadcast the new premium status for self-hosted subscriptions.
UpgradePremiumToOrganizationCommand
- Inject IPushNotificationService.
- After downgrading the user’s personal premium while upgrading to an organization, call PushPremiumStatusChangedAsync(user) so clients see the user’s premium flag change.

Tests

Update billing service tests to:
- Use IUserRepository to return a User instance when subscriptions are enabled/disabled.
- Assert IPushNotificationAdapter.NotifyPremiumStatusChangedAsync(user) is called in subscription deleted/updated scenarios.
Update premium command tests to:
- Assert IPushNotificationService.PushPremiumStatusChangedAsync is called with a User whose Premium flag matches the expected post-command state (true for new subscriptions, false when upgrading to an organization).

📸 Screenshots

github-actions · 2026-03-11T12:49:47Z

Checkmarx One – Scan Summary & Details – d5c17320-44e4-4e07-b2d9-73ef41e3ea71

New Issues (2)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1592	details Method at line 1592 of /src/Api/Vault/Controllers/CiphersController.cs gets a parameter from a user request from id. This parameter value flows ... Attack Vector
2		CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1419	details Method at line 1419 of /src/Api/Vault/Controllers/CiphersController.cs gets a parameter from a user request from id. This parameter value flows ... Attack Vector

Fixed Issues (1)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	~~CSRF~~	/src/Api/Vault/Controllers/CiphersController.cs: 293

…otification

codecov · 2026-03-11T13:23:18Z

Codecov Report

❌ Patch coverage is 61.36364% with 34 lines in your changes missing coverage. Please review.
✅ Project coverage is 57.69%. Comparing base (2efacd5) to head (93c8e4c).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
...ervices/Implementations/PushNotificationAdapter.cs	0.00%	12 Missing ⚠️
...lling/Services/Implementations/LicensingService.cs	20.00%	12 Missing ⚠️
...ervices/Implementations/PaymentSucceededHandler.cs	0.00%	7 Missing ⚠️
src/Notifications/HubHelpers.cs	66.66%	2 Missing and 1 partial ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #7198   +/-   ##
=======================================
  Coverage   57.69%   57.69%           
=======================================
  Files        2035     2036    +1     
  Lines       89672    89755   +83     
  Branches     7993     7997    +4     
=======================================
+ Hits        51738    51788   +50     
- Misses      36074    36106   +32     
- Partials     1860     1861    +1

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

src/Billing/Services/Implementations/PaymentSucceededHandler.cs

src/Core/Platform/Push/IPushNotificationService.cs

src/Billing/Services/Implementations/PushNotificationAdapter.cs

src/Billing/Services/Implementations/SubscriptionDeletedHandler.cs

src/Billing/Services/Implementations/SubscriptionUpdatedHandler.cs

src/Core/Billing/Premium/Commands/CreatePremiumCloudHostedSubscriptionCommand.cs

src/Core/Billing/Premium/Commands/CreatePremiumSelfHostedSubscriptionCommand.cs

src/Core/Models/PushNotification.cs

amorask-bitwarden · 2026-03-11T18:46:51Z

src/Core/Models/PushNotification.cs

    public Guid TargetOrganizationUserId { get; set; }
 }
+
+public class PremiumStatusPushNotification


❌ Please review the comments on lines 7 and 8 of this file regarding the location this file should live in.

@cyprain-okeke This still needs to be addressed - the location of the file should be owned to a location we own per the comments at the top of the file.

djsmith85

It seems like after the comments from @amorask-bitwarden are addressed, a review from platform might not be necessary anymore. In case they do, please re-request a review.

…otification

amorask-bitwarden

Thanks for resolving the feedback - just one thing was missed and then we're good to go.

amorask-bitwarden · 2026-03-18T14:00:34Z

src/Core/Models/PushNotification.cs

    public Guid TargetOrganizationUserId { get; set; }
 }
+
+public class PremiumStatusPushNotification


@cyprain-okeke This still needs to be addressed - the location of the file should be owned to a location we own per the comments at the top of the file.

…otification

sonarqubecloud · 2026-03-19T14:27:55Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

changes for the premium push notification

2dabe3e

cyprain-okeke requested review from a team as code owners March 11, 2026 12:38

cyprain-okeke requested review from amorask-bitwarden and djsmith85 March 11, 2026 12:38

Merge branch 'main' into billing/pm-32477/premiumStatusChanged-push-n…

80a0f4e

…otification

cyprain-okeke added 2 commits March 11, 2026 14:40

Fix the lint build

4055d78

implement the hub-helper

fa063c0

amorask-bitwarden requested changes Mar 11, 2026

View reviewed changes

djsmith85 reviewed Mar 12, 2026

View reviewed changes

cyprain-okeke and others added 3 commits March 12, 2026 13:02

Resolve the pr comments

1886e62

Merge branch 'main' into billing/pm-32477/premiumStatusChanged-push-n…

50317ab

…otification

fix the lint error

2c6281e

cyprain-okeke requested review from amorask-bitwarden and djsmith85 and removed request for djsmith85 March 12, 2026 12:22

Merge branch 'main' into billing/pm-32477/premiumStatusChanged-push-n…

cd1f7e8

…otification

amorask-bitwarden requested changes Mar 18, 2026

View reviewed changes

cyprain-okeke and others added 2 commits March 18, 2026 15:18

Merge branch 'main' into billing/pm-32477/premiumStatusChanged-push-n…

a010dbb

…otification

move PremiumStatusPushNotification to billing

c1a83f3

cyprain-okeke requested a review from amorask-bitwarden March 18, 2026 14:30

Merge branch 'main' into billing/pm-32477/premiumStatusChanged-push-n…

0c40149

…otification

amorask-bitwarden approved these changes Mar 19, 2026

View reviewed changes

Merge branch 'main' into billing/pm-32477/premiumStatusChanged-push-n…

93c8e4c

…otification

cyprain-okeke merged commit 768de5f into main Mar 19, 2026
43 checks passed

cyprain-okeke deleted the billing/pm-32477/premiumStatusChanged-push-notification branch March 19, 2026 14:51

Conversation

cyprain-okeke commented Mar 11, 2026

🎟️ Tracking

📔 Objective

📸 Screenshots

Uh oh!

github-actions bot commented Mar 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codecov bot commented Mar 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

amorask-bitwarden Mar 11, 2026

Choose a reason for hiding this comment

Uh oh!

amorask-bitwarden Mar 18, 2026

Choose a reason for hiding this comment

Uh oh!

djsmith85 left a comment

Choose a reason for hiding this comment

Uh oh!

amorask-bitwarden left a comment

Choose a reason for hiding this comment

Uh oh!

amorask-bitwarden Mar 18, 2026

Choose a reason for hiding this comment

Uh oh!

sonarqubecloud bot commented Mar 19, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions bot commented Mar 11, 2026 •

edited

Loading

codecov bot commented Mar 11, 2026 •

edited

Loading