Authorize streams
Make sure the user has permission to create/view particular streams. Should involve userId and group membership. The socket service would need to either know about stream ownership / groups, or be able to ask another service (resource) to tell it.
Edited by Nicolas Pope