Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>SignalR signs both your connection id and your <code>Identity</code> together in order to create a new <code>connectionToken</code> every time you start a new connection. This <code>connectionToken</code> is then sent to the SignalR client as part of the <code>negotiate</code> response.</p> <p>Every time you make a request to SignalR, whether it be a <code>connect</code>, <code>reconnect</code>, or <code>send</code> request, SignalR verifies that your <code>connectionToken</code> matches both your client's connection id AND <code>Identity</code>.</p> <p>The <code>connectionToken</code> is essentially a CSRF token used in order to prevent attackers running third-party websites from surreptitiously making SignalR requests on behalf of shared clients. Obviously this doesn't help if you've enabled SignalR's cross-domain support, but the <code>connectionToken</code> still works the same in this case.</p> <p><a href="https://stackoverflow.com/questions/15349043/signalr-the-connection-id-is-in-the-incorrect-format">Taylor's answer</a> was correct. You should <code>stop</code> and then <code>start</code> your SignalR connection when your client's <code>Identity</code> changes. This will force a new <code>negotiate</code> request which will give your client a new connection id with a new <code>connectionToken</code> signed with your client's updated <code>Identity</code>.</p> <p>P.S. The server-sent events <code>connect</code> request isn't failing because it was established before your client's <code>Identity</code> was changed. The <code>connectionToken</code> is only checked at the request is received, but server-sent events keeps the response open indefinitely. </p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    3. VO
      singulars
      1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload