## Finding MEDIUM-1 **Severity**: MEDIUM **File**: `server/composables/ws.ts` ### Description WebSocket authentication checked on connection only, not per-message. ### Impact - Stolen session = persistent WS access ### Remediation Add auth token validation to message handler.
Finding MEDIUM-1
Severity: MEDIUM
File:
server/composables/ws.tsDescription
WebSocket authentication checked on connection only, not per-message.
Impact
Remediation
Add auth token validation to message handler.