Build-an-X workflow for testing real-time in-app notifications delivered over WebSocket (RFC 6455) or Server-Sent Events (WHATWG SSE spec), Firebase Realtime Database / Firestore listeners, and notification center read/unread state - covers fan-out to multiple sessions, offline-then-reconnect delivery, and ordering guarantees. Distinct from email, SMS, push, and webhook channels. Use when authoring tests for any notification that appears inside a connected web or mobile app UI without leaving the application.
80
100%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Passed
No findings from the security scan
In-app notifications are the channel that email, SMS, push, and webhook tests do not cover: real-time messages delivered to a connected client inside the application, typically via a persistent transport. Four transport stacks are common:
| Transport | Standard / provider | Primary use |
|---|---|---|
| WebSocket | IETF RFC 6455 | Bidirectional; chat, live feeds, collaboration |
| SSE | WHATWG HTML Living Standard (EventSource) | Server-to-client only; activity feeds, progress |
| Firebase RTDB listeners | Firebase Realtime Database | JSON tree synced to all clients |
| Firestore onSnapshot | Cloud Firestore | Document / collection live listeners |
The skill walks a common test workflow and then provides per-transport patterns.
Transport-level protocol tests (frame parsing, flow control, SSE reconnect
timing) belong to qa-realtime-protocols; this skill tests the notification
feature layer that runs on top.
| Level | Example | Trade-offs |
|---|---|---|
| Mock the transport | Simulate WebSocket messages via a test double | Fast, deterministic; misses server fan-out logic |
| Local server | ws / socket.io test server in the same process | Covers serialization and handler logic |
| Firebase emulator | Firebase Local Emulator Suite | Covers RTDB / Firestore rules + listener behavior |
| Full integration | Real backend + test user tokens | Highest fidelity; slowest |
Default: mock the transport for unit tests of the notification handler; use the Firebase emulator for RTDB / Firestore delivery tests; reserve full integration for fan-out and ordering scenarios.
Per RFC 6455 Section 4,
the opening handshake upgrades HTTP to a persistent bidirectional channel
(101 Switching Protocols). The server sends a notification as a text or
binary frame (opcodes 0x1 / 0x2 per RFC 6455 Section 5.2). Tests mock at
the frame-receive boundary so the notification handler is exercised without a
live server.
Test pattern (Node.js / Jest with ws):
const WebSocket = require('ws');
const { jest } = require('@jest/globals');
describe('in-app notification handler - WebSocket', () => {
let server;
let wss;
beforeEach((done) => {
wss = new WebSocket.Server({ port: 0 }, done);
});
afterEach((done) => {
wss.close(done);
});
it('delivers notification payload to the client handler', (done) => {
wss.once('connection', (ws) => {
ws.send(JSON.stringify({ type: 'NEW_MESSAGE', id: 'n-1', body: 'Hello' }));
});
const client = new WebSocket(`ws://localhost:${wss.options.port}`);
client.on('message', (data) => {
const msg = JSON.parse(data);
expect(msg.type).toBe('NEW_MESSAGE');
expect(msg.id).toBe('n-1');
client.close();
done();
});
});
it('marks notification unread on receipt', (done) => {
wss.once('connection', (ws) => {
ws.send(JSON.stringify({ type: 'NEW_MESSAGE', id: 'n-2', body: 'Hi' }));
});
const client = new WebSocket(`ws://localhost:${wss.options.port}`);
const notificationStore = createNotificationStore(); // app module under test
client.on('message', (data) => {
notificationStore.receive(JSON.parse(data));
expect(notificationStore.unreadCount()).toBe(1);
client.close();
done();
});
});
});Per RFC 6455 Section 7.4.1,
the close code 1000 signals normal closure; 1001 means the endpoint is
going away. Tests for reconnect logic should simulate 1001 or 1006
(abnormal closure) and assert that the client attempts reconnection and
re-subscribes to notification channels.
Per the WHATWG Server-Sent Events spec,
EventSource dispatches events as MessageEvent objects carrying data and
lastEventId, and on disconnect the user agent auto-reconnects with a
Last-Event-ID header so the server resumes from the last acknowledged event.
Tests should assert this recovery path.
Test pattern (Node.js with eventsource + express):
const EventSource = require('eventsource');
const express = require('express');
describe('in-app notification handler - SSE', () => {
let app;
let httpServer;
let sentEvents = [];
beforeAll((done) => {
app = express();
app.get('/notifications/stream', (req, res) => {
res.set({ 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' });
sentEvents.forEach(({ id, data }) => {
res.write(`id: ${id}\ndata: ${JSON.stringify(data)}\n\n`);
});
});
httpServer = app.listen(0, done);
});
afterAll((done) => httpServer.close(done));
it('dispatches notification event to the handler', (done) => {
sentEvents = [{ id: 'e-1', data: { type: 'PAYMENT_RECEIVED', amount: 50 } }];
const port = httpServer.address().port;
const es = new EventSource(`http://localhost:${port}/notifications/stream`);
es.onmessage = (event) => {
const payload = JSON.parse(event.data);
expect(payload.type).toBe('PAYMENT_RECEIVED');
expect(event.lastEventId).toBe('e-1');
es.close();
done();
};
});
});An SSE event's retry field (milliseconds) sets the client reconnection delay;
assert the client honors a server-supplied value in integration tests.
onValue() fires once immediately with current data and again on every change
at that location and below (RTDB read/write docs).
Run listener tests against the
Firebase Local Emulator Suite,
not production. Emulator setup plus the write and read-state test patterns are
in references/firebase-listener-tests.md.
onSnapshot() fires immediately with the current document and again on each
change, carrying metadata.hasPendingWrites and metadata.fromCache; assert
fromCache transitions for offline-then-reconnect delivery
(Firestore listen docs).
The includeMetadataChanges test pattern is in
references/firebase-listener-tests.md.
In-app notification centers track aggregate unread counts and per-notification read state. Test the state machine independently of the transport:
describe('notification store', () => {
it('increments unread count when a new notification arrives', () => {
const store = createNotificationStore();
store.receive({ id: 'n-1', type: 'COMMENT', read: false });
expect(store.unreadCount()).toBe(1);
});
it('decrements unread count when notification is marked read', () => {
const store = createNotificationStore();
store.receive({ id: 'n-1', type: 'COMMENT', read: false });
store.markRead('n-1');
expect(store.unreadCount()).toBe(0);
});
it('markAllRead resets unread count to zero', () => {
const store = createNotificationStore();
['n-1', 'n-2', 'n-3'].forEach((id) =>
store.receive({ id, type: 'COMMENT', read: false })
);
store.markAllRead();
expect(store.unreadCount()).toBe(0);
});
});Fan-out (one server event reaching N simultaneously connected clients) is a distinct failure mode from single-client delivery. Test with multiple concurrent WebSocket or SSE clients:
it('delivers the same notification to all connected sessions', (done) => {
const PORT = wss.options.port;
const received = [];
const SESSIONS = 3;
const clients = Array.from({ length: SESSIONS }, () => new WebSocket(`ws://localhost:${PORT}`));
clients.forEach((ws) => {
ws.on('message', (data) => {
received.push(JSON.parse(data));
if (received.length === SESSIONS) {
const ids = received.map((m) => m.id);
expect(new Set(ids).size).toBe(1); // same notification id
expect(ids.length).toBe(SESSIONS); // all sessions received it
clients.forEach((c) => c.close());
done();
}
});
});
// wait for all clients to connect, then broadcast
let connected = 0;
wss.on('connection', () => {
connected += 1;
if (connected === SESSIONS) broadcastNotification({ id: 'n-fan', type: 'ALERT' });
});
});Tests for RTDB and Firestore leverage the emulator's network simulation; for WebSocket/SSE, simulate by closing the connection before events are sent:
it('delivers queued notifications after reconnect', (done) => {
let reconnected = false;
let client = new WebSocket(`ws://localhost:${PORT}`);
client.once('open', () => {
// simulate disconnect by closing the connection abruptly
client.terminate();
// reconnect after a short delay
client = new WebSocket(`ws://localhost:${PORT}`);
reconnected = true;
client.on('message', (data) => {
expect(reconnected).toBe(true);
const msg = JSON.parse(data);
expect(msg.type).toBe('QUEUED_NOTIFICATION');
client.close();
done();
});
});
});For RTDB/Firestore, the SDK's offline write queue and the /.info/connected
reconnect assertion are covered in
references/firebase-listener-tests.md.
In-app notification streams must deliver events in consistent order, especially
when multiple events are emitted in quick succession. Per the
WHATWG SSE spec,
MessageEvent.lastEventId tracks the sequence position and is replayed as the
Last-Event-ID header on reconnect, enabling gap detection:
it('delivers notifications in emission order', (done) => {
const received = [];
wss.once('connection', (ws) => {
['n-1', 'n-2', 'n-3'].forEach((id) =>
ws.send(JSON.stringify({ id, type: 'ACTIVITY', seq: parseInt(id.split('-')[1]) }))
);
});
const client = new WebSocket(`ws://localhost:${PORT}`);
client.on('message', (data) => {
received.push(JSON.parse(data));
if (received.length === 3) {
const seqs = received.map((m) => m.seq);
expect(seqs).toEqual([1, 2, 3]);
client.close();
done();
}
});
});For each in-app notification transport in the codebase:
1001 / 1006 for WebSocket (Step 2); HTTP 204 disabling SSE reconnection (Step 3)| Anti-pattern | Why it fails | Fix |
|---|---|---|
| Test only single-session delivery | Fan-out bugs (missed broadcasts, duplicates) go undetected | Step 7 multi-client test |
| Assert notification text in transport test | Couples UI copy to protocol test; brittle on copy changes | Assert type + id fields; test UI text separately |
| Fire-and-forget RTDB write without awaiting listener | Race between write and listener callback | Use onValue callback as the assertion gate (Steps 4-5) |
Skip fromCache / hasPendingWrites assertions | Offline delivery bugs appear only in production | Firestore includeMetadataChanges: true (Step 5) |
| Mock at the application store instead of the transport boundary | Transport serialization bugs (JSON parse errors, binary frame issues) go untested | Mock at the WebSocket/SSE message event boundary (Steps 2-3) |
| Reconnect test that only asserts the connection reopened | Does not verify listener re-subscription or queued-event delivery | Assert notification receipt after reconnect (Step 8) |
websocket-tests
and
server-sent-events-tests
in qa-realtime-protocols.lastEventId tracking but does not mandate server
ordering.terminate() simulates abnormal closure (1006); graceful
close() sends a proper close frame per RFC 6455 Section 7.EventSource states, lastEventId, retry, reconnection algorithm)onValue, get, off signatures and behavior)/.info/connected, onDisconnect, offline write queue, server timestamps)onSnapshot, hasPendingWrites, fromCache, latency compensation)websocket-tests,
server-sent-events-tests
in qa-realtime-protocols - transport-layer protocol testspush-notification-test-author,
email-flow-test-author,
sms-test-author,
webhook-delivery-tester