From b1c9ab2d9ccd6d5dcffabe2d5c4bca42563e2d3e Mon Sep 17 00:00:00 2001
From: Vitaly Takmazov
Date: Thu, 20 Sep 2018 17:48:54 +0300
Subject: do not handle messages from invalid websocket sessions

---
 .../src/main/java/com/juick/components/Notifications.java               | 2 +-
 .../components/configuration/JuickServerWebsocketConfiguration.java     | 1 -
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/juick-notifications/src/main/java/com/juick/components/Notifications.java b/juick-notifications/src/main/java/com/juick/components/Notifications.java
index 15af4a52..79afe8fa 100644
--- a/juick-notifications/src/main/java/com/juick/components/Notifications.java
+++ b/juick-notifications/src/main/java/com/juick/components/Notifications.java
@@ -321,7 +321,7 @@ public class Notifications extends TextWebSocketHandler implements NotificationC
 
     @Override
     protected void handleTextMessage(WebSocketSession session, TextMessage text) throws Exception {
-        if (!closeFlag.get()) {
+        if (!closeFlag.get() && this.session.getDelegate().equals(session)) {
             com.juick.Message jmsg = jsonMapper.readValue(text.asBytes(), com.juick.Message.class);
 
             if (logger.isInfoEnabled()) // prevent writeValueAsString execution if logger disabled
diff --git a/juick-notifications/src/main/java/com/juick/components/configuration/JuickServerWebsocketConfiguration.java b/juick-notifications/src/main/java/com/juick/components/configuration/JuickServerWebsocketConfiguration.java
index a29566aa..bc7f59fb 100644
--- a/juick-notifications/src/main/java/com/juick/components/configuration/JuickServerWebsocketConfiguration.java
+++ b/juick-notifications/src/main/java/com/juick/components/configuration/JuickServerWebsocketConfiguration.java
@@ -25,7 +25,6 @@ import javax.inject.Inject;
 import java.util.Collections;
 import java.util.List;
 
-@Lazy
 @Configuration
 @EnableScheduling
 public class JuickServerWebsocketConfiguration {
-- 
cgit v1.2.3