Method getWebsocketToken

rest/handler.go:1070–1089

verifyWebsocketToken checks for a valid websocket token in the request headers. If present, invalidate the token so it can't be reused. Returns a nil error if there is no token on the header but no user object. If the header is found,

()

//
// Returns a nil error if there is no token on the header but no user object. If the header is found,
func (h *handler) getWebsocketToken() string {
	// go blip expects only one Sec-WebSocket-Protocol header, with comma separated values
	protocolHeaders := h.rq.Header.Get(secWebSocketProtocolHeader)
	var outputHeaders []string
	var sessionID string
	for header := range strings.SplitSeq(protocolHeaders, ",") {
		trimmedHeader := strings.TrimSpace(header)
		if !strings.HasPrefix(trimmedHeader, blipSessionIDPrefix) {
			outputHeaders = append(outputHeaders, header)
			continue
		}
		sessionID = strings.TrimPrefix(trimmedHeader, blipSessionIDPrefix)
	}
	if sessionID == "" {
		return ""
	}
	// Remove the websocket protocol so it doesn't get logged in BlipWebsocketServer.handshake
	h.rq.Header.Set(secWebSocketProtocolHeader, strings.Join(outputHeaders, ","))
	return sessionID
}

func checkJWTIssuerStillValid(ctx context.Context, dbCtx *db.DatabaseContext, user auth.User) *auth.PrincipalConfig {
	issuer := user.JWTIssuer()