fix: read WebSocket token from query_params directly, not function arg

2026-04-01 13:22:20 +02:00
parent 6e317a9c67
commit b63f5d59a9
1 changed files with 2 additions and 1 deletions
@@ -150,8 +150,9 @@ async def open_file(body: dict, user: dict = Depends(current_user)):


@router.websocket("/ws")
-async def websocket_endpoint(ws: WebSocket, token: str = ""):
+async def websocket_endpoint(ws: WebSocket):
    from auth import get_user_for_token
+    token = ws.query_params.get("token", "")
    user = get_user_for_token(token)
    if not user:
        await ws.close(code=4001)