Socket IO JWT Flow

1-LaravelController.php

public function launchWidget($oAuthToken)
    {
        // .. Redacted lots of code
        $loyaltyIoJwt = $this->loyaltyIoService->createJwt(['user' => $laravelUser->id, 'scopes' => ['**']]);

        return view('pages.loyalty.widget', [
            'jwt' => $loyaltyIoJwt,
        ]);
    }

2-LaravelView.blade.php

<script type="text/javascript">
    window.jwt = '{{ $jwt }}';
    // This will then later get used by whatever javascript iniates the socket io connection
  </script>

3-NodeServer.js

// This gets run as soon as a new connection is opened

function forceAuth(ws, req) {
  ws.authenaticated = false;

  if (req.query && req.query.token) {
    const auth = validateJwt(req.query.token);
    if (auth) {
      console.log('Connection authenticated successfully!', auth);
      ws.auth = auth;
      ws.authenticated = true;
    }
  }

  if (!ws.authenticated) {
    ws.close();
  }

  return ws;
}