How are WebSocket connections secured?
WebSocket connections at amaise undergo full JWT authentication. The process includes:
Checking the bearer token format
JWT decoding and validation
Verification of the tenant ID
Authorization check
All failed authentication attempts are logged with client details (IP address, request data). The same security standards apply as for REST API endpoints — including issuer whitelist, audience validation, and role-based access control.