Cometchat

CometChat's authentication guide distinguishes development AuthKey login from production AuthToken use. A CometChat integration should not ship a quick-start credential model unchanged.

Bind the chat identity to the application's authenticated user and test logout. A valid chat session for the wrong person is an authorization failure.