Intrigue's WebSockets implementation does not check if user is still logged in

[brjeter]

Description

If a user has the Intrigue "Search" view up in the browser and logs out in a separate tab, they are still able to modify and execute queries. This is because, after the initial authentication, the WebSocket requests do not check if the user still has a token in that HttpSession.

Steps to Reproduce

1. Go to Intrigue and go into a workspace.
2. Execute a search (wildcard is fine)
3. In a separate browser tab, pull up the AdminUI and logout.
4. Go back to Intrigue and edit the open query and/or execute it.

Expected behavior :

The query cannot be executed once the user is logged out.

Actual behavior:

The query is executed and relevant results returned.

Reproduces how often:

100%

Platform and environment:

N/A

Affects versions

2.13.6 and master

Additional Information

N/A