SEC-3026: simpSubscribeDestMatchers should match also the disconnect event

[spring-projects-issues]

Alex (Migrated from SEC-3026) said:

In my websocket security I've a rule similar to the usual one:

bq. .simpSubscribeDestMatchers("/topic/**").permitAll()

this is nice because it allows any client to subscribe to public queues, but it has a problem: it does not allow them to unsubscribe.

So another method with a tentative name like simpUnsubscribeDestMatchers would be needed for that, or maybe better a method that can match both subscribe and unsubscribe type of messages in order to apply the security policy