ws: accept commands from authenticated users

1 files changed, 8 insertions, 4 deletions

diff --git a/juick-server/src/main/java/com/juick/server/WebsocketManager.java b/juick-server/src/main/java/com/juick/server/WebsocketManager.java
index 85950c2c..5c976416 100644
--- a/juick-server/src/main/java/com/juick/server/WebsocketManager.java
+++ b/juick-server/src/main/java/com/juick/server/WebsocketManager.java
@@ -156,10 +156,14 @@ public class WebsocketManager extends TextWebSocketHandler {
     protected void handleTextMessage(WebSocketSession session, TextMessage message) throws Exception {
         User user = clients.stream().filter(c -> c.session.equals(session)).map(c -> c.visitor)
                 .findFirst().orElse(AnonymousUser.INSTANCE);
-        String command = message.getPayload().trim();
-        if (StringUtils.isNotEmpty(command)) {
-            CommandResult result = commandsManager.processCommand(user, command, URI.create(""));
-            session.sendMessage(new TextMessage(result.getText()));
+        if (!user.isAnonymous()) {
+            String command = message.getPayload().trim();
+            if (StringUtils.isNotEmpty(command)) {
+                CommandResult result = commandsManager.processCommand(user, command, URI.create(""));
+                session.sendMessage(new TextMessage(result.getText()));
+            }
+        } else {
+            session.sendMessage(new TextMessage("Authorization required"));
         }
     }