Supposedly websockets (the protocol) support authorization headers, but often th... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

		leni536 1 day ago \| parent \| context \| favorite \| on: Server-Sent Events (SSE) Are Underrated Supposedly websockets (the protocol) support authorization headers, but often there are no APIs for that in websocket libraries, so people just abuse the subprotocols header in the handshake.

apitman 1 day ago [–]

I don't think the problem is libraries. Browsers don't support this.

leni536 1 day ago | [–]

Sure, I didn't mean to distinguish browsers and the JS websocket API and websocket libraries in other languages.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact