Is there any way to identify which client session/user is calling the subscribe method of a DataAdapter?
For instance, in the MessengerDemo, when a user subscribes to messages to himself, it is done with the "im_<nick>" item. This is defined by the client, so it would be pretty easy for a user to subsititue someone else's nick and thereby subscribe to another's messages instead of their own.
Now, I already verify the identity of the client in the notifyUser method in the metadataAdapter, is there any way to use the validated user/session information from there in the subscribe method, so I can allow users to only subscribe to their own feed?