Security

Authentication

Securing your SOCKJS connections

1Token-Based Authentication

javascript

const token = localStorage.getItem('auth_token');
const sock = new SockJS('wss://socket-public.shockjs.app?token=' + token);

sock.onopen = function() {
  sock.send(JSON.stringify({
    type: 'auth',
    token: token
  }));
};

2Session Authentication

javascript

// Server validates session cookie automatically
const sock = new SockJS('wss://socket-public.shockjs.app', null, {
  sessionId: function() {
    return getSessionId();
  }
});