Authenticate mid-session to receive user-specific events. Send your JWT token (same as REST API) to upgrade from app-level to user-level auth. Supports re-authentication for token refresh or user switch.
Connect-time auth: Pass ?token=eyJ... as a query param alongside appId. If the token is invalid or the appId doesn’t match, the connection degrades to app-level auth (not closed).