Hi
What would be solution if we are to initiate the connection from the
browser itself, AFAIK websocket library for browsers does not support
adding headers.

Thanks,

*Ayyoob Hamza*
*Senior Software Engineer*
WSO2 Inc.; http://wso2.com
email: ayy...@wso2.com cell: +94 77 1681010 <%2B94%2077%207779495>

On Fri, Apr 21, 2017 at 11:32 AM, Irunika Weeraratne <irun...@wso2.com>
wrote:

> Hi Godwin,
> IMHO the best way to do it using HTTP header. Are you using netty
> directly? If that so there is a way to add necessary headers for the
> initial handshake and we can check them in the server side.
>
> Thanks,
> Irunika
>
> *Irunika Weeraratne*
> *Software Engineer | WSO2, Inc. <http://wso2.com/>*
> *Email : irun...@wso2.com <irun...@wso2.com>*
> *LinkedIn : https://lk.linkedin.com/in/irunika
> <https://lk.linkedin.com/in/irunika>*
> *Mobile : +94712403314 <+94%2071%20240%203314>*
> *Lean . Enterprise . Middleware*
>
>
> On Fri, Apr 21, 2017 at 11:27 AM, Arshardh Ifthikar <arsha...@wso2.com>
> wrote:
>
>> You can find it here: https://docs.wso2.com/display/
>> AM210/Create+a+WebSocket+API
>>
>> Thanks
>>
>> On Fri, Apr 21, 2017 at 11:24 AM, Godwin Shrimal <god...@wso2.com> wrote:
>>
>>> Can you please share the relevant API Manager source ?
>>>
>>>
>>> Thanks
>>> Godwin
>>>
>>> On Fri, Apr 21, 2017 at 11:22 AM, Arshardh Ifthikar <arsha...@wso2.com>
>>> wrote:
>>>
>>>> Hi,
>>>>
>>>> IMHO the best approach would be to send it via a header in the initial
>>>> HTTP request used to establish the connection. This is the method we follow
>>>> to send the access token for websocket APIs in the API Manager.
>>>>
>>>> Thanks
>>>> Arshardh
>>>>
>>>> On Fri, Apr 21, 2017 at 11:11 AM, Godwin Shrimal <god...@wso2.com>
>>>> wrote:
>>>>
>>>>> Hi All,
>>>>>
>>>>> What is the best way to transmit a security token in web socket while
>>>>> establishing a connection ? Currently we are passing through path 
>>>>> parameter
>>>>> such as wss://localhost:8080/server/<token>
>>>>>
>>>>> Is it secure to sent it via path parameter ? If not what is the
>>>>> correct approach ?
>>>>>
>>>>>
>>>>> Thanks
>>>>> Godwin
>>>>>
>>>>> --
>>>>> *Godwin Amila Shrimal*
>>>>> WSO2 Inc.; http://wso2.com
>>>>> lean.enterprise.middleware
>>>>>
>>>>> mobile: *+94772264165*
>>>>> linkedin: *http://lnkd.in/KUum6D <http://lnkd.in/KUum6D>*
>>>>> twitter: https://twitter.com/godwinamila
>>>>> <http://wso2.com/signature>
>>>>>
>>>>> _______________________________________________
>>>>> Dev mailing list
>>>>> Dev@wso2.org
>>>>> http://wso2.org/cgi-bin/mailman/listinfo/dev
>>>>>
>>>>>
>>>>
>>>>
>>>> --
>>>> *Arshardh Ifthikar*
>>>> Trainee Software Engineer
>>>> WSO2, Inc.
>>>> Mobile: +94719806525 <+94%2071%20980%206525>
>>>>
>>>
>>>
>>>
>>> --
>>> *Godwin Amila Shrimal*
>>> WSO2 Inc.; http://wso2.com
>>> lean.enterprise.middleware
>>>
>>> mobile: *+94772264165*
>>> linkedin: *http://lnkd.in/KUum6D <http://lnkd.in/KUum6D>*
>>> twitter: https://twitter.com/godwinamila
>>> <http://wso2.com/signature>
>>>
>>
>>
>>
>> --
>> *Arshardh Ifthikar*
>> Trainee Software Engineer
>> WSO2, Inc.
>> Mobile: +94719806525 <+94%2071%20980%206525>
>>
>
>
> _______________________________________________
> Dev mailing list
> Dev@wso2.org
> http://wso2.org/cgi-bin/mailman/listinfo/dev
>
>
_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to