fix(HH-603): harden legacy database logging (#163)

Co-authored-by: Rogee <rogee@ipao.vip>

backend/internal/handler/ws/ws_test.go

@@ -859,6 +859,24 @@ func TestServeCable_WidgetReceivesTokenRoomEvent(t *testing.T) {
 	assert.Equal(t, map[string]interface{}{}, payload["additional_attributes"])
 }
 
+func TestServeCable_UnknownPubsubTokenReturnsUnauthorized(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	db, err := gorm.Open(sqlite.Open("file:"+t.Name()+"?mode=memory&cache=private"), &gorm.Config{})
+	require.NoError(t, err)
+	require.NoError(t, db.AutoMigrate(&model.Account{}, &model.Contact{}, &model.Inbox{}, &model.ContactInbox{}))
+
+	handler := NewHandler(NewHubSimple(), wspkg.NewWSAuthenticator(nil, repository.NewContactInboxRepo(db), db))
+	router := gin.New()
+	router.GET("/cable", handler.ServeCable)
+	server := httptest.NewServer(router)
+	t.Cleanup(server.Close)
+
+	response, err := http.Get(server.URL + "/cable?pubsub_token=stale-token")
+	require.NoError(t, err)
+	t.Cleanup(func() { _ = response.Body.Close() })
+	require.Equal(t, http.StatusUnauthorized, response.StatusCode)
+}
+
 func TestDashboardOutgoingReachesDashboardAndReconnectedWidget(t *testing.T) {
 	gin.SetMode(gin.TestMode)
 	db, err := gorm.Open(sqlite.Open("file:"+t.Name()+"?mode=memory&cache=private"), &gorm.Config{})