Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

By default the BGW WebSocket proxy expects that you use protocol MQTT over WebSockets so the data is forwarded to the BGW MQTT proxy and authenticated and authorized there. You can configure the WebSocket proxy to forward to any non-MQTT upstream server though. In this case, the WebSocket proxy expects the last value of the "protocol" field to be an OpenID Connect access token obtained from Keycloak. JavaScript Example:

...

The access token is then verified and authorized (see below). I If everything is ok, the WebSocket connection is established, otherwise rejected.

...