class EventStreamsController < ApplicationController
  def show
    render json: EventStream.connection_info(params[:id]).to_json
  end
end

class EventStreamsController < ApplicationController
  before_action :authenticate_user!
  def show
    pp = PaperPolicy.new(params[:id], current_user)
    if pp.paper
      render json: EventStream.connection_info(params[:id]).to_json
    else
      head :forbidden
    end
  end
end

Add some untested basic auth to streams controller
Add some untested basic auth to streams controller
