3 ms·

Supposedly websockets (the protocol) support authorization headers, but often there are no APIs for that in websocket libraries, so people just abuse the subpro

Supposedly websockets (the protocol) support authorization headers, but often there are no APIs for that in websocket libraries, so people just abuse the subprotocols header in the handshake.

apitman 2y ago
I don't think the problem is libraries. Browsers don't support this.
- leni536 2y ago
  Sure, I didn't mean to distinguish browsers and the JS websocket API and websocket libraries in other languages.