mirror of
https://github.com/suitenumerique/meet.git
synced 2026-07-27 20:29:09 +00:00
lebaudantoine
10e8bca5a4
Introduce a new permission class that verifies the caller making a request is both authenticated and actually present in the call. It will be used to gate actions that require the user to be live in the room, for example: * allowing someone in from the waiting room * promoting another participant to a different role More generally, this covers every action where, for security reasons, we need to make sure the user is truly present in the call and that someone is not reusing their cookie as an API key.