DO WebSocket Singleton — showcase

1. Login (gets connect token from /api/login)

connect token: —

2. WebSocket connection

disconnected

3. Channels

4. Publish (server-side, /publish/:channel + service auth)

publishing always uses service auth (Bearer header). The browser never publishes directly — your API would broker this.

5. Admin (service-auth required)

activity log