[keycloak-dev] WebSocket integration

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 All, I'm investigating the possibility of protecting a WebSocket endpoint with Keycloak and I found out that it works out of the box with cookie-based authentication, meaning, the web page that opens the web socket client should itself be protected, so that the cookie is sent on the WebSocket request and authentication is made (confidential). In my target scenario, however, the web page is a single-page app (public) talking with a backend (bearer-only) in another host. So, I'd like to know if there's anything planned on the WebSockets front for such scenario. For instance, a JavaScript utility that handles the setup of the socket (either with a custom protocol, or an initial message with the bearer token, or another alternative) and a server counterpart for this. If there isn't yet, I'll probably have some time to explore this. - - Juca.