fix: block publick access by default for all not-opentopic websocket topics (should be allowed by the config.auth.websocketTopicAuth)

AdminForth/1830/ws-authorization-work

Author: yaroslav8765

adminforth/modules/configValidator.ts

@@ -28,6 +28,7 @@ import {
   AdminForthResourcePages,
   AdminForthDataTypes,
   Predicate,
+  AdminUser,
 } from "../types/Common.js";
 import AdminForth from "adminforth";
 import { AdminForthConfigMenuItem } from "adminforth";
@@ -1216,6 +1217,16 @@ export default class ConfigValidator implements IConfigValidator {
         }
       }
 
+      if (!newConfig.auth.websocketTopicAuth) {
+        newConfig.auth.websocketTopicAuth = async (topic: string, adminUser: AdminUser) => {
+          if (!adminUser) {
+            // don't allow anonymous users to subscribe
+            return false;
+          }
+          return true;
+        }
+      }
+
       newConfig.auth.rateLimit = newConfig.auth.rateLimit || [...DEFAULT_AUTH_RATE_LIMIT];
       if (!Array.isArray(newConfig.auth.rateLimit)) {
         errors.push(`auth.rateLimit must be an array of strings in format "500/5m"`);