Generally speaking there will be 2 parts of this:

• Reuse header provider in js SDK for Subscription Link to pass header to server
• Investigate how to put auth on subscriptions without auth middleware.