Spring security/Spring session/Web sockets
问题 We are attempting to use a combination of spring session, spring security and websockets to implement security for a websocket API without using cookies. Ideally we would be using a authorization header or authentication using the websocket/stomp messages but this does not seem to be possible with the current spring websocket support. We are using a pre-auth provider to validate a query parameter token and log the user in. I can see that the proper user is pulled out in the pre-auth for the