Improve web socket authentication

[lgpl/argeo-commons.git] / org.argeo.ext.equinox.jetty / src / org / argeo / equinox / jetty / WebSocketJettyCustomizer.java

diff --git a/org.argeo.ext.equinox.jetty/src/org/argeo/equinox/jetty/WebSocketJettyCustomizer.java b/org.argeo.ext.equinox.jetty/src/org/argeo/equinox/jetty/WebSocketJettyCustomizer.java
index 83934537c364a99e08d6304d35d4244e03d53b08..a74c706580a7621533426c14a0cae1a8c93e5665 100644 (file)
--- a/org.argeo.ext.equinox.jetty/src/org/argeo/equinox/jetty/WebSocketJettyCustomizer.java
+++ b/org.argeo.ext.equinox.jetty/src/org/argeo/equinox/jetty/WebSocketJettyCustomizer.java
@@ -119,8 +119,9 @@ public class WebSocketJettyCustomizer extends JettyCustomizer {
 
                                                CmsSession cmsSession = getCmsSession(httpSessionId);
                                                if (cmsSession == null) {
-                                                       session.disconnect();
-                                                       return;
+//                                                     session.disconnect();
+//                                                     return;
+
 //                                                     try {
 //                                                             session.getUpgradeResponse().sendForbidden("Web Sockets must always be authenticated.");
 //                                                     } catch (IOException e) {