Authentication for a websocket connection

[box-turtle]

We are providing a notebook experience as part of our workload and have to open a websocket connection to a BE Jupyter server. As far as I can tell it is not possible to attach the JWT to an Authentication header for the wss connection and the recommended practice is to use the Sec-WebSocket-Protocol header for passing the JWT.

Is that an acceptable approach?

thanks

[anitamayorov]

Hi @box-turtle,

It looks like Sec-WebSocket-Protocol header is not exactly used for authentication purposes so I am not sure whether it's a good approach, but I do see a wide discussion regarding this. I also see suggestions to use the query param approach, but I suggest exploring this a bit more to get the full picture of using JWT auth with WebSockets.

[box-turtle]

I agree that header was originally designed for Protocol information as the name implies. Since the Fabric spark notebook is opening a websocket connection I was hoping you could share how you are using JWT authentication for that connection. Query param approach will send the JWT in clear text which seems less than ideal.

[anitamayorov]

Hi @box-turtle,
Currently we are not using this connection for our Sample code, I suggest consulting with Fabric Spark team for a suggested approach.