title: How to correctly implement security on a websocket session?
body: <p>I want to implement an asynchronous mechanism using websockets. 
  Here's the idea:    </p>
  
  <ol>
  <li>The client performs a REST call</li>
  <li>The server returns a "subscribingID" and starts a background process</li>
  <li><p>The client registers as subscriber on this topic (suppose 12232442 is the id):</p>
  
  <pre class="lang-js prettyprint-override"><code>this.stompClient.subscribe('/callback/12232442', (messageOutput) =&gt; {
      let mess = JSON.parse(messageOutput.body);
      console.log(mess);
  });
  </code></pre></li>
  <li><p>Once done the server simply sends the message and closes the connection:</p>
  
  <pre class="lang-js prettyprint-override"><code>stompSession.send("callback/12232442", new MessageOutput());
  </code></pre></li>
  </ol>
  
  <p>It should work but here's the catch: how can I be sure that another client can't simply subscribe to an ID that exists but does not belong to them?</p>
  
  <p>Also, is there any built-in mechanism to achieve this? </p>