Kicking Participants From Video Rooms Needs Server-Side Authorization, Not Client Notices

The article argues that removing a participant from a video room should revoke server-side authorization rather than just send the browser a leave message. It recommends issuing narrowly scoped admission tokens and tracking a membership epoch on the server, so reconnections carrying an outdated epoch are rejected. A tabletop example shows a kicked contractor rejoining within seconds using a still-valid credential, because transport closure was mistaken for authorization revocation. The author stresses that clients cannot be trusted to enforce access and that alerts should detect revoked memberships that regain access. Idempotent moderation commands are also recommended so retries do not produce inconsistent outcomes.