1 files changed, 9 insertions, 0 deletions

diff --git a/internal/handler/websocket/handler.go b/internal/handler/websocket/handler.go
index de71926..dfe7b9e 100644
--- a/internal/handler/websocket/handler.go
+++ b/internal/handler/websocket/handler.go
@@ -33,6 +33,7 @@ type MetricsRecorder interface {
         DecrementSubscriptions()
         SetActiveSubscriptions(count int)
         RecordRequest(method, status string, duration float64)
+        RecordAuthAttempt(success bool)
         RecordBlockedEvent(kind int32)
 }
 
@@ -522,6 +523,13 @@ func (h *Handler) sendAuthChallenge(ctx context.Context, conn *websocket.Conn, c
 }
 
 func (h *Handler) handleAuth(ctx context.Context, conn *websocket.Conn, raw []json.RawMessage, state *connState) error {
+        success := false
+        defer func() {
+                if h.metrics != nil {
+                        h.metrics.RecordAuthAttempt(success)
+                }
+        }()
+
         if len(raw) != 2 {
                 return fmt.Errorf("AUTH expects 2 elements")
         }
@@ -560,6 +568,7 @@ func (h *Handler) handleAuth(ctx context.Context, conn *websocket.Conn, raw []js
         state.authenticatedPubkey = authEvent.PubKey
         log.Printf("WebSocket client authenticated: %s", authEvent.PubKey[:16])
 
+        success = true
         // Don't send OK for AUTH - it's not an EVENT
         return nil
 }