Accept *** from query param for cross-subdomain WebSocket auth

Shipped

11 மார்ச், 2026 அன்று 1:57 AM UTC

Author

Kamo

Commit

a7f15f6

Read *** ID from ?***= query parameter first, falling back to cookie. This allows the frontend on internal.kamocrm.com to authenticate WebSocket connections to media.kamocrm.com without cross-domain cookies. The interceptor validates the session directly against Redis.