I'm working on a project with websockets and I hate working around unsupported headers. biggest problem is passing json web tokens, requiring us to have short l

I'm working on a project with websockets and I hate working around unsupported headers. biggest problem is passing json web tokens, requiring us to have short lived cookies just for authenticating. Yes, we can always "just exchange information" but this requires custom, non-standard logic, for such a ubiquitous use case.