LiveView Websocket Security

[daveboo]

@chrismccord

Add your live route definition behind your regular :admin plug/pipeline that performs admin user authentication and you are all set.

So, it would be unwise to have live routes behind this pipeline then?

scope “/”, MyAppWeb do
pipe_through [:browser, :visitor, :redirect_if_user_is_authenticated]

live "/user/register", UserNewLive