mirror of
https://github.com/requarks/wiki.git
synced 2026-08-17 16:24:47 -05:00
The onConnect handler for GraphQL subscriptions was empty, allowing any client to establish a WebSocket connection and subscribe to loggingLiveTrail without authentication. Added JWT verification in onConnect using the same RS256 credentials and permission checks (manage:system) used elsewhere. Co-authored-by: kolega.dev <faizan@kolega.ai>