diff --git a/packages/backend/src/server/api/StreamingApiServerService.ts b/packages/backend/src/server/api/StreamingApiServerService.ts index 6ca96d3093..1131256864 100644 --- a/packages/backend/src/server/api/StreamingApiServerService.ts +++ b/packages/backend/src/server/api/StreamingApiServerService.ts @@ -108,14 +108,9 @@ export class StreamingApiServerService { try { [user, app] = await this.authenticateService.authenticate(token); - if (app !== null && !app.permission.some(p => p === 'read:account')) { + if ((app !== null && !app.permission.some(p => p === 'read:account')) || user == null) { throw new AuthenticationError('Your app does not have necessary permissions to use websocket API.'); } - - // Ensure we have a valid user - if (!user) { - throw new AuthenticationError('Invalid token or user not found.'); - } } catch (e) { if (e instanceof AuthenticationError) { socket.write([