Recommanded way to secure liveview callback

Do you log errors, and do you want to be able to inspect those logs? If so, raising might be ok, assuming that an unauthorized access is an unexpected exceptional behavior.

Yep, this is exceptional behaviour as it sould be only the case for people trying to hack the application. My initial concern is illustrated in this thread :

A final consideration, but here I don’t know enough about LiveView to determine if it’s a valid concern, so it’s more like a question to the LiveView experts: is it possible for an attacker to disrupt service by causing many of these errors in a short time, therefore hitting the supervisor max_restarts ?

Yes that’s probably the main reason I’m asking here. I don’t want that the choices I do now makes the application failed later !

Thanks