From b63f5d59a977cfb8e3e582d043cdc38ab4c70afe Mon Sep 17 00:00:00 2001 From: "thomas.kopp" Date: Wed, 1 Apr 2026 13:22:20 +0200 Subject: [PATCH] fix: read WebSocket token from query_params directly, not function arg --- api/router.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/api/router.py b/api/router.py index c8b7f2e..9ac4ead 100644 --- a/api/router.py +++ b/api/router.py @@ -150,8 +150,9 @@ async def open_file(body: dict, user: dict = Depends(current_user)): @router.websocket("/ws") -async def websocket_endpoint(ws: WebSocket, token: str = ""): +async def websocket_endpoint(ws: WebSocket): from auth import get_user_for_token + token = ws.query_params.get("token", "") user = get_user_for_token(token) if not user: await ws.close(code=4001)