websocket-js连接如何携带token验证

websocket协议在握手阶段借用了HTTP的协议，但是在JavaScript websocketAPI中并没有修改请求头的方法。

var token='eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJzdWFkbWluIiwiY3JlYXRlZCI6MTY1NjI5ODQxMjkwMSwiYXV0aG9yaXRpZXMiOlt7ImF1dGhvcml0eSI6ImFwcEFsYXJtIn0seyJhdXRob3JpdHkiOiJyZXNvdXJjZU1vbml0b3IifSx7ImF1dGhvcml0eSI6InJlc291cmNlIn0seyJhdXRob3JpdHkiOiJzeXM6dXNlciJ9LHsiYXV0aG9yaXR5IjoiZGV0VGFzayJ9LHsiYXV0aG9yaXR5IjoicmVvdXJjZTpjb25maWcifSx7ImF1dGhvcml0eSI6ImhvbWUifSx7ImF1dGhvcml0eSI6InJlb3VyY2U6YXVkaXQifSx7ImF1dGhvcml0eSI6InJlb3VyY2U6bW9uaXRvciJ9LHsiYXV0aG9yaXR5IjoiYXBwQW5hbHlzaXMifSx7ImF1dGhvcml0eSI6ImRpc3Bvc2FsU2NoZW1lIn0seyJhdXRob3JpdHkiOiJhcHBNYW5hZ2UifSx7ImF1dGhvcml0eSI6InJlb3VyY2U6YWxhcm0ifSx7ImF1dGhvcml0eSI6InN5czpyb2xlIn0seyJhdXRob3JpdHkiOiJyZW91cmNlOnVybENvbmZpZyJ9XSwiZXhwIjoxNjU2MzAyMDEyfQ.5Sh9wzMtsnsncbDyrzaC64e5RFN6e-_p-nbkaL0BQv2zkfmiALN84MoY0IMkvXUYnw9_HQe8KS8azyGXLNrVdg'

send发送数据

var  ws = new WebSocket("ws://" + url + "/webSocketServer");
ws.onopen=function(){
    ws.send(token)
}

1.请求地址中带参数

var  ws = new WebSocket("ws://" + url?token + "/webSocketServer");

2.基于协议头

websocket请求头中可以包含Sec-WebSocket-Protocol这个属性，该属性是一个自定义的子协议。它从客户端发送到服务器并返回从服务器到客户端确认子协议。我们可以利用这个属性添加token。

var ws = new WebSocket("ws://" + url+ "/webSocketServer",[token]);

如果基于协议头传递了参数，后端响应的时候header也需要带上协议头参数。

public static Session connection(String uri){
   Session session = null;
   try {
       WebSocketContainer container = ContainerProvider.getWebSocketContainer();
       ClientEndpointConfig cec = ClientEndpointConfig.Builder
               .create().configurator(new ClientEndpointConfig.Configurator() {
                   public void beforeRequest(Map<String, List<String>> headers) {
                        headers.put("token", token);
                   }
               }).build();
       session = container.connectToServer(ClientSocket.class, cec, URI.create(uri));
   } catch (Exception e) {
       e.printStackTrace();
   }
   return session;
}

或者写filter过滤websocket请求加相应参数