SignalR Security

DiunaBI.API/Hubs/EntityChangeHub.cs

@@ -1,16 +1,15 @@
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.SignalR;
 
 namespace DiunaBI.API.Hubs;
 
+/// <summary>
+/// SignalR hub for broadcasting entity change notifications to authenticated clients.
+/// Clients can only listen - broadcasting is done server-side by EntityChangeInterceptor.
+/// </summary>
+[Authorize]
 public class EntityChangeHub : Hub
 {
-    public async Task SendEntityChange(string module, string id, string operation)
-    {
-        await Clients.All.SendAsync("EntityChanged", new
-        {
-            module,
-            id,
-            operation
-        });
-    }
+    // No public methods - clients can only listen for "EntityChanged" events
+    // Broadcasting is handled server-side by EntityChangeInterceptor via IHubContext
 }