From 35a9ce1e7b1f5fa4e84bdaaae82090372086b9c1 Mon Sep 17 00:00:00 2001
From: Agent Zero <agent@media-on.de>
Date: Mon, 27 Jul 2026 02:18:49 +0200
Subject: [PATCH] debug: add WebSocket connection logging to find 403 cause

---
 app/plugins/builtins/kommunikation/routes.py | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/app/plugins/builtins/kommunikation/routes.py b/app/plugins/builtins/kommunikation/routes.py
index 8d1cd95..276c07c 100644
--- a/app/plugins/builtins/kommunikation/routes.py
+++ b/app/plugins/builtins/kommunikation/routes.py
@@ -471,23 +471,33 @@ async def websocket_endpoint(
 
     Authenticates via session cookie. On connect, subscribes user to all their conversations.
     """
+    import logging as _log
+    _logger = _log.getLogger("websocket_debug")
+    _logger.warning("WS CONNECT START: path=%s headers=%s", websocket.url.path, dict(websocket.headers))
+
     # Verify Origin header against allowed CORS origins
     from app.config import get_settings
     from app.core.auth import get_session_data, get_redis, verify_ws_origin
 
     settings = get_settings()
+    _logger.warning("WS verify_ws_origin result: %s", verify_ws_origin(websocket))
     if not verify_ws_origin(websocket):
+        _logger.warning("WS REJECTED: origin not allowed")
         await websocket.close(code=4003, reason="Origin not allowed")
         return
 
     session_id = websocket.cookies.get(settings.session_cookie_name)
+    _logger.warning("WS session_id: %s", session_id is not None)
     if not session_id:
+        _logger.warning("WS REJECTED: no session cookie")
         await websocket.close(code=4001, reason="Not authenticated")
         return
 
     redis = get_redis()
     session_data = await get_session_data(redis, session_id)
+    _logger.warning("WS session_data: %s", session_data is not None)
     if session_data is None:
+        _logger.warning("WS REJECTED: session expired")
         await websocket.close(code=4001, reason="Session expired")
         return
 
@@ -497,7 +507,9 @@ async def websocket_endpoint(
     # Get WebSocket manager from service container
     from app.core.service_container import get_container
     container = get_container()
+    _logger.warning("WS container has comm_websocket: %s", container.has("comm_websocket"))
     if not container.has("comm_websocket"):
+        _logger.warning("WS REJECTED: comm_websocket not in container. Services: %s", list(container._services.keys()))
         await websocket.close(code=4003, reason="Messaging not available")
         return