Django频道-拒绝未经授权的websocket请求的正确方式？

from channels.db import database_sync_to_async
from channels.middleware import BaseMiddleware
from channels.sessions import SessionMiddleware
from channels.auth import AuthMiddlewareStack
from django.contrib.auth.models import AnonymousUser

class WebSocketAuthMiddleware(BaseMiddleware):
    async def __call__(self, scope, receive, send):
        # 检查是否存在认证信息
        if "session" not in scope:
            raise ValueError("Unauthorized WebSocket connection")

        # 获取用户ID
        session = SessionMiddleware.get_session(scope)
        user_id = session.get("user_id")

        # 根据用户ID获取用户对象
        user = await self.get_user(user_id)

        # 将用户对象添加到scope中，以便在视图中使用
        scope["user"] = user

        # 继续处理请求
        return await super().__call__(scope, receive, send)

    @database_sync_to_async
    def get_user(self, user_id):
        if user_id:
            return User.objects.get(id=user_id)
        return AnonymousUser()

from django.urls import path
from channels.routing import ProtocolTypeRouter, URLRouter
from myapp.middleware import WebSocketAuthMiddleware
from myapp.consumers import MyConsumer

application = ProtocolTypeRouter(
    {
        "http": get_asgi_application(),
        "websocket": WebSocketAuthMiddleware(
            URLRouter(
                [
                    path("ws/mychannel/", MyConsumer.as_asgi()),
                ]
            )
        ),
    }
)