close connection when not authenticated anymore.

jonaswinkler · Feb 3, 2021 · c51fa60 · c51fa60
1 parent e300ee0
commit c51fa60
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/src/paperless/consumers.py b/src/paperless/consumers.py
@@ -7,8 +7,11 @@
 
 class StatusConsumer(WebsocketConsumer):
 
+    def _authenticated(self):
+        return 'user' in self.scope and self.scope['user'].is_authenticated
+
     def connect(self):
-        if not self.scope['user'].is_authenticated:
+        if not self._authenticated():
             raise DenyConnection()
         else:
             async_to_sync(self.channel_layer.group_add)(
@@ -20,4 +23,7 @@ def disconnect(self, close_code):
             'status_updates', self.channel_name)
 
     def status_update(self, event):
-        self.send(json.dumps(event['data']))
+        if not self._authenticated():
+            self.close()
+        else:
+            self.send(json.dumps(event['data']))