feat: push access token to every channel during heartbeat

src/RealtimeClient.ts

@@ -34,6 +34,7 @@ type Message = {
 const noop = () => {}
 
 export default class RealtimeClient {
+  accessToken: string | null = null
   channels: RealtimeSubscription[] = []
   endPoint: string = ''
   headers?: { [key: string]: string } = DEFAULT_HEADERS
@@ -317,6 +318,15 @@ export default class RealtimeClient {
     return this.ref.toString()
   }
 
+  /**
+   * Sets the JWT access token used for channel subscription authorization and Realtime RLS.
+   *
+   * @param token A JWT string.
+   */
+  setAccessToken(token: string) {
+    this.accessToken = token
+  }
+
   private _onConnOpen() {
     this.log('transport', `connected to ${this.endPointURL()}`)
     this._flushSendBuffer()
@@ -391,5 +401,10 @@ export default class RealtimeClient {
       payload: {},
       ref: this.pendingHeartbeatRef,
     })
+    this.channels.forEach((channel) =>
+      channel.push(CHANNEL_EVENTS.access_token, {
+        access_token: this.accessToken,
+      })
+    )
   }
 }

src/lib/constants.ts

@@ -29,6 +29,7 @@ export enum CHANNEL_EVENTS {
   join = 'phx_join',
   reply = 'phx_reply',
   leave = 'phx_leave',
+  access_token = 'access_token',
 }
 
 export enum TRANSPORTS {