Skip to content

Require authentication for GraphQL WebSocket upgrade (unomi-3.0.x) - #844

Open
sergehuber wants to merge 1 commit into
unomi-3.0.xfrom
backport/graphql-websocket-auth-3.0.x
Open

Require authentication for GraphQL WebSocket upgrade (unomi-3.0.x)#844
sergehuber wants to merge 1 commit into
unomi-3.0.xfrom
backport/graphql-websocket-auth-3.0.x

Conversation

@sergehuber

Copy link
Copy Markdown
Contributor

Summary

  • Require Basic (JAAS) authentication before accepting a GraphQL WebSocket upgrade on unomi-3.0.x.
  • Backport of Require authentication for GraphQL WebSocket upgrade (master) #843, adapted for the maintenance-line GraphQL auth model (JAAS only).
  • Existing WebSocket IT now sends credentials; adds coverage for missing/wrong auth returning 401.

Test plan

  • GraphQL WebSocket IT on this branch
  • Manual: unauthenticated upgrade returns 401; Basic auth succeeds

Backport of master fix adapted for 3.0.x JAAS-only GraphQL auth (no tenant API keys / SecurityService ThreadLocal on the socket).
@sergehuber sergehuber changed the title Require authentication for GraphQL WebSocket upgrade Require authentication for GraphQL WebSocket upgrade (unomi-3.0.x) Aug 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant