You can use something like socket-io middlewares for the same, it will help keep the session up to date. So even if the user revokes the session while the socket connection is still connected, he wont be able to access that resource