Access checked in the broker
The message broker itself checks who may receive each stream, not the app. Someone who bypasses the app and connects directly still sees only their own conversations.
Bita
When the server is in your own room, where the data is kept is no longer a question.
The message broker itself checks who may receive each stream, not the app. Someone who bypasses the app and connects directly still sees only their own conversations.
Authentication runs on OpenID Connect and connects to your identity system; your password policy is the one that applies.
When a session is closed, that device's message channel closes in the same moment; no waiting for a token to expire.
Each file is written once; replacing an attachment makes a new file, so what a recipient received never changes under them.
No part of the system reaches an Internet service to start or to run.
The console needs its own role and is not published on the public path; an ordinary account reaches no administrative action.
Tell us about your environment and what you need. One of our specialists will answer you.