invoiceninja/routes/channels.php

<?php

/*
|--------------------------------------------------------------------------
| Broadcast Channels
|--------------------------------------------------------------------------
|
| Here you may register all of the event broadcasting channels that your
| application supports. The given channel authorization callbacks are
| used to check if an authenticated user can listen to the channel.
|
*/

Broadcast::channel('company-{company_key}', function (\App\Models\User $user, string $company_key) {
    return $user->company()->company_key === $company_key;
}, ['middleware' => ['api', 'api_db', 'token_auth']]);