We are using public group channels to enable us to implement our own visibility layer “on top” (we are not using any of the out-the-box UI components).
We have administrative roles and users in our model which need to be able to browse channels which they are not active participants in, and then can choose to become a participant if needed.
We issue user session tokens on the backend, and keep the token obscured, but it is theoretically possible to learn the session token, and then use it with the Javascript SDK to discover all public channels and users in the system.
We would like an optional switch on the account setup (like the switch to disable userid-only login), which will disable all channel discovery and user discovery functionality. So that the Javascript SDK (and other client side SDKs) needs the frontend to have explicit knowledge of channel URLs and Userids from somewhere else.
Thank you
