Unauthorize live subscriptions which are no longer authorized.

[LiranCohen]

Currently RecordsSubscribe does not check if a subscription is valid beyond when it is processed. This means that while the subscription is live, if something changes that would make the subscription invalid (ex. delete of protocol role, or revocation of a grant) the subscriber will still receive updates until they close the connection.

We would like to proactively evict these subscriptions where possible, or potentially re-authorize on a TTL if evicting is too cumbersome.

[alanhkarp]

Can you just drop any connections associated with a revoked subscription?

[LiranCohen]

Can you just drop any connections associated with a revoked subscription?

Well the subscription itself is not revoked, but rather a user's protocol role may be deleted, or a grant which invalidates the subscription authorization.

But yeah that's the idea, is to stop emitting messages to the handler provided.

The dwn-sdk-js package itself keeps this transport agnostic, so the dwn-server itself will deal with dropping web socket connections if necessary.

Nothing too complex, just breaking it out into separate issues so that we can prioritize and chunk out subscriptions into smaller PRs.