1 files changed, 31 insertions, 0 deletions
diff --git a/app/graphql/subscriptions/base_subscription.rb b/app/graphql/subscriptions/base_subscription.rb
new file mode 100644
index 00000000000..5f7931787df
--- /dev/null
+++ b/app/graphql/subscriptions/base_subscription.rb
@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+module Subscriptions
+  class BaseSubscription < GraphQL::Schema::Subscription
+    object_class Types::BaseObject
+    field_class Types::BaseField
+
+    def initialize(object:, context:, field:)
+      super
+
+      # Reset user so that we don't use a stale user for authorization
+      current_user.reset if current_user
+    end
+
+    def authorized?(*)
+      raise NotImplementedError
+    end
+
+    private
+
+    def unauthorized!
+      unsubscribe if context.query.subscription_update?
+
+      raise GraphQL::ExecutionError, 'Unauthorized subscription'
+    end
+
+    def current_user
+      context[:current_user]
+    end
+  end
+end