Merge branch '432722-add-token-authorization-for-actioncable' into 'master'

Add token authorization to ActionCable

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/138084



Merged-by: Aboobacker MK <akarakath@gitlab.com>
Approved-by: Serena Fang <sfang@gitlab.com>
Approved-by: Allison Browne <abrowne@gitlab.com>
Approved-by: Ottilia Westerlund <12746880-ottilia_westerlund@users.noreply.gitlab.com>
Approved-by: Aboobacker MK <akarakath@gitlab.com>
Co-authored-by: Pavel Shutsin <pshutsin@gitlab.com>

app/channels/application_cable/connection.rb

@@ -3,13 +3,14 @@
 module ApplicationCable
   class Connection < ActionCable::Connection::Base
     include Logging
+    include Gitlab::Auth::AuthFinders
     identified_by :current_user
     public :request
     def connect
-      self.current_user = find_user_from_session_store
+      self.current_user = find_user_from_bearer_token || find_user_from_session_store
     end
     private

spec/channels/application_cable/connection_spec.rb

@@ -43,6 +43,16 @@
     end
   end
+  context 'when bearer header is provided' do
+    let(:user_pat) { create(:personal_access_token) }
+
+    it 'finds user by PAT' do
+      connect(ActionCable.server.config.mount_path, headers: { Authorization: "Bearer #{user_pat.token}" })
+
+      expect(connection.current_user).to eq(user_pat.user)
+    end
+  end
+
   context 'when session cookie is not set' do
     it 'sets current_user to nil' do
       connect