+from marimo._server.api.auth import validate_auth
+    if app_state.enable_auth and not validate_auth(websocket):