From 1a48807027a162283b3dae8ef1c78018936b94c8 Mon Sep 17 00:00:00 2001
From: Ahmed Thyab <ahmedoh.thiab@gmail.com>
Date: Tue, 25 Jun 2024 13:34:45 +0300
Subject: [PATCH] channels authentication

---
 src/routes/channels.php | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/src/routes/channels.php b/src/routes/channels.php
index 685eb0a..fc17ea6 100644
--- a/src/routes/channels.php
+++ b/src/routes/channels.php
@@ -5,8 +5,8 @@
 use Corals\User\Transformers\API\SimpleUserPresenter;
 use Illuminate\Support\Facades\Broadcast;
 
-Broadcast::channel('messages.{user}', function (User $user) {
-    return true;
+Broadcast::channel('messages.{user}', function (User $authUser, User $user) {
+    return $authUser->id === $user->id;
 });
 
 Broadcast::channel('online', function (User $user) {
@@ -14,5 +14,8 @@
 });
 
 Broadcast::channel('openedDiscussion.{discussion}', function (User $user, Discussion $discussion) {
-    return true;
+    return $discussion->participations()->where([
+        'messaging_participations.participable_type' => getMorphAlias($user),
+        'messaging_participations.participable_id' => $user->id,
+    ])->exists();
 });