From 9504723ef2db5829e761701dd2b8afad819a6da2 Mon Sep 17 00:00:00 2001
From: proddy <paul@derbyshire.nl>
Date: Tue, 28 Oct 2025 22:19:20 +0100
Subject: [PATCH] add back security

---
 src/web/WebLogService.cpp | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/web/WebLogService.cpp b/src/web/WebLogService.cpp
index 214204f2c..121e72e69 100644
--- a/src/web/WebLogService.cpp
+++ b/src/web/WebLogService.cpp
@@ -32,6 +32,9 @@ WebLogService::WebLogService(AsyncWebServer * server, SecurityManager * security
         [this](AsyncWebServerRequest * request, JsonVariant json) { getSetValues(request, json); },
         HTTP_ANY);
 
+    // Add authentication filter to EventSource
+    // EventSource (SSE) cannot use custom headers, so authentication is done via URL parameter
+    events_.setFilter(securityManager->filterRequest(AuthenticationPredicates::IS_AUTHENTICATED));
     server->addHandler(&events_);
 }