We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 06e978a commit e59c825Copy full SHA for e59c825
mercure.rst
@@ -362,6 +362,7 @@ a JWT containing at least one target marking the update to the Hub.
362
363
To provide this JWT, the subscriber can use a cookie,
364
or a ``Authorization`` HTTP header.
365
+
366
Cookies are automatically sent by the browsers when opening an ``EventSource`` connection if the ``withCredentials`` attribute is set to ``true``.
367
Using cookies is the most secure and preferred way when the client is a web browser.
368
If the client is not a web browser, then using an authorization header is the way to go.
0 commit comments