Accept *** from query param for cross-subdomain WebSocket auth

Shipped: March 11, 2026 at 1:57 AM UTC
Author: Kamo
Commit: a7f15f6

Read *** ID from ?***= query parameter first, falling back to cookie. This allows the frontend on internal.kamocrm.com to authenticate WebSocket connections to media.kamocrm.com without cross-domain cookies. The interceptor validates the session directly against Redis.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free Forever View Pricing