LiveView Websocket Security

[josevalim]

@LostKobrakai

I just looked at the example in detail: I’m not sure if a logout should close all connections scoped to the user.

You can also disconnect just one of the sessions. All you have to do is identify the connections per session token rather than user id. That’s what I am submitting to mix phx.gen.auth.