How is this secure?

[jacob3]

@chris11 I think my post here might be relevant:

SPA using an API through a WebSocket

I’ve been circeling around this problem for a while now, and I find myselft pretty close to a solid solution. I want to share what I found before asking my questions. Both to give some context and to share some information that I found poorly communicated in the Auth0 Docs where WebSockets seems to be a banned word. In retrospect it is clear that a WebSocket can and should be treated the exact same way as a good old HTTP REST API, but when you are in the thick of it WebSockets seems like an ent…

Apologies if I am mistaken.