| Currently clients can only authenticate on web socket connections and there is no mechanism for authorisation. If we provide examples of how to implement this the amount of code we are forcing developers to write will quickly grow and we provide little value, as just creating a SubscriptionServer is already forcing this. A possible solution to this is to create a subscription package in voyager server. This would:
- Create the subscription server
- Authenticate clients on each connection
- Authorise clients on each operation
Developers would then be able to easily create and manage their subscription server and easily provide a full auth solution. |