3 ms·
> ... because you cannot attach an Authorization: Bearer header to a websocket. Well, not properly. You can abuse the Sec-Websocket-Protocol header to pass an
by jand 2y ago
> ... because you cannot attach an Authorization: Bearer header to a websocket.
Well, not properly. You can abuse the Sec-Websocket-Protocol header to pass an initial token to the server.
- Thorrez 2y ago:) I have in fact done that.