Realtime

Revoked user keeps a live subscription

Why it happens

Socket authentication predates a membership change.

Potential bug

Private changes continue to stream.

Mitigation

Push revocation, expire session epochs, and reauthorize channel delivery.

See it in context