Fix: verify_ws_origin async + await callers

- auth.py: verify_ws_origin is now async def
- kommunikation/routes.py: await verify_ws_origin
- ai_ui_control/routes.py: await verify_ws_origin

app/core/auth.py

@@ -91,7 +91,7 @@ def hash_token(token: str) -> str:
     return hashlib.sha256(token.encode()).hexdigest()
 
 
-def verify_ws_origin(websocket) -> bool:
+async def verify_ws_origin(websocket) -> bool:
     """Verify that the WebSocket upgrade request comes from an allowed origin.
 
     Checks the Origin header against the configured CORS origins.

app/plugins/builtins/ai_ui_control/routes.py

@@ -209,7 +209,7 @@ async def ai_ui_control_ws(websocket: WebSocket):
     from app.core.service_container import get_container
 
     settings = get_settings()
-    if not verify_ws_origin(websocket):
+    if not await verify_ws_origin(websocket):
         await websocket.close(code=4003, reason="Origin not allowed")
         return
 

app/plugins/builtins/kommunikation/routes.py

@@ -477,7 +477,7 @@ async def websocket_endpoint(
     from app.core.auth import get_session_data, get_redis, verify_ws_origin
 
     settings = get_settings()
-    if not verify_ws_origin(websocket):
+    if not await verify_ws_origin(websocket):
         await websocket.close(code=4003, reason="Origin not allowed")
         return