Fix WebSocket 403 by accepting before access check
- websocket.py: move await websocket.accept() before check_session_access
  so auth failures close the WebSocket with 4003 instead of returning
  HTTP 403 on the upgrade request
- Reject anonymous WebSocket connections explicitly (4003)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
1 parent bad65a1 commit 2d5ec76aabae16d55dccc1bfc34fd0dd675270ad
@Eugene Sukhodolskiy Eugene Sukhodolskiy authored on 4 May
Showing 1 changed file
View
navi/api/websocket.py