Fix: WebSocket auth rejected deterministic tokens resulting in blank console

server.js

@@ -1185,12 +1185,20 @@ app.post('/api/servers/:id/modrinth/uninstall', (req, res) => {
   }
 });
 
-// --- WebSocket Gateway Connection Handler ---
-wss.on('connection', (ws, req) => {
+  // --- WebSocket Gateway Connection Handler ---
+wss.on('connection', async (ws, req) => {
   try {
     const parsedUrl = new URL(req.url, 'http://localhost');
     const token = parsedUrl.searchParams.get('token');
-    if (!token || !activeSessions.has(token)) {
+    
+    // Use the same deterministic token logic as HTTP routes
+    const config = await getAuthConfig();
+    if (!token || !config || !config.passwordHash) {
+      ws.close(4001, 'Unauthorized');
+      return;
+    }
+    const expectedToken = generateStableToken(config.passwordHash, config.salt);
+    if (token !== expectedToken) {
       ws.close(4001, 'Unauthorized');
       return;
     }