{
  "id": 11114215,
  "title": "A long-lived stream is not a standing permission grant",
  "url": "https://urgent.news/2026/10/01/a-long-lived-stream-is-not-a-standing-permission-grant",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-01T05:07:43.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/authbyexample1/a-long-lived-stream-is-not-a-standing-permission-grant-1201"
  },
  "original_language": "en",
  "account": null,
  "summary": "SSE and WebSocket handlers often authorize once when the connection opens, then push events for minutes or hours. That first check is not a standing grant. While the stream is open, membership can be revoked, a role narrowed, or the resource moved out of the subject's scope. If you only gate the handshake, later events can leak data the subject is no longer allowed to see. Re-authorize before…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}