Pusher Channels

The Pusher Channels entry is useful for discussing realtime access boundaries. Pusher's private-channel documentation requires authorization for subscriptions.

Set up two test accounts and a fictional private conversation. Confirm the intended participant can subscribe, while the other account cannot gain access merely by changing the channel name. Also check what happens when the session expires or the user switches accounts.

A connected socket is only part of the result. The important question is whether each subscriber is entitled to the data being sent.