Merge pull request #13364 from NovoNordisk-OpenSource/websocket-behind-auth

refactor: hiding websocket initalization behind authentication

backend/open_webui/routers/auths.py

@@ -80,8 +80,8 @@ async def get_session_user(
     auth_header = request.headers.get("Authorization")
     auth_token = get_http_authorization_cred(auth_header)
     token = auth_token.credentials
-
     data = decode_token(token)
+
     expires_at = data.get("exp")
 
     if (expires_at is not None) and int(time.time()) > expires_at:

backend/open_webui/socket/main.py

@@ -192,6 +192,9 @@ async def connect(sid, environ, auth):
             # print(f"user {user.name}({user.id}) connected with session ID {sid}")
             await sio.emit("user-list", {"user_ids": list(USER_POOL.keys())})
             await sio.emit("usage", {"models": get_models_in_use()})
+            return True
+    
+    return False
 
 
 @sio.on("user-join")