{"action":"created","issue":{"url":"https://api.github.com/repos/feathersjs/feathers-authentication/issues/126","repository_url":"https://api.github.com/repos/feathersjs/feathers-authentication","labels_url":"https://api.github.com/repos/feathersjs/feathers-authentication/issues/126/labels{/name}","comments_url":"https://api.github.com/repos/feathersjs/feathers-authentication/issues/126/comments","events_url":"https://api.github.com/repos/feathersjs/feathers-authentication/issues/126/events","html_url":"https://github.com/feathersjs/feathers-authentication/issues/126","id":143459596,"number":126,"title":"Generated tokens are broadcast to all socket clients (by default)","user":{"login":"t2t2","id":1122555,"avatar_url":"https://avatars.githubusercontent.com/u/1122555?v=3","gravatar_id":"","url":"https://api.github.com/users/t2t2","html_url":"https://github.com/t2t2","followers_url":"https://api.github.com/users/t2t2/followers","following_url":"https://api.github.com/users/t2t2/following{/other_user}","gists_url":"https://api.github.com/users/t2t2/gists{/gist_id}","starred_url":"https://api.github.com/users/t2t2/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/t2t2/subscriptions","organizations_url":"https://api.github.com/users/t2t2/orgs","repos_url":"https://api.github.com/users/t2t2/repos","events_url":"https://api.github.com/users/t2t2/events{/privacy}","received_events_url":"https://api.github.com/users/t2t2/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-03-25T09:00:06Z","updated_at":"2016-03-25T14:30:39Z","closed_at":null,"body":"![feathers-auth-broadcast](https://cloud.githubusercontent.com/assets/1122555/14041338/68cd9e88-f278-11e5-8d5f-51f7baf65a63.png)\r\n"},"comment":{"url":"https://api.github.com/repos/feathersjs/feathers-authentication/issues/comments/201312289","html_url":"https://github.com/feathersjs/feathers-authentication/issues/126#issuecomment-201312289","issue_url":"https://api.github.com/repos/feathersjs/feathers-authentication/issues/126","id":201312289,"user":{"login":"daffl","id":338316,"avatar_url":"https://avatars.githubusercontent.com/u/338316?v=3","gravatar_id":"","url":"https://api.github.com/users/daffl","html_url":"https://github.com/daffl","followers_url":"https://api.github.com/users/daffl/followers","following_url":"https://api.github.com/users/daffl/following{/other_user}","gists_url":"https://api.github.com/users/daffl/gists{/gist_id}","starred_url":"https://api.github.com/users/daffl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/daffl/subscriptions","organizations_url":"https://api.github.com/users/daffl/orgs","repos_url":"https://api.github.com/users/daffl/repos","events_url":"https://api.github.com/users/daffl/events{/privacy}","received_events_url":"https://api.github.com/users/daffl/received_events","type":"User","site_admin":false},"created_at":"2016-03-25T14:30:39Z","updated_at":"2016-03-25T14:30:39Z","body":"Oh dear. This can be fixed quickly though via:\r\n\r\n```js\r\napp.service('auth/local').filter(() => false);\r\n```\r\n\r\nWhich should probably be the default for all auth services (we don't need their events anwyay).\r\nWe were discussing turning off event dispatching by default so you have to enable it explicitly. It would be the more secure but also more confusing approach."}}