Securing Socket.io

Question

I am using a Node.js based https server that authenticates using HTTP Basic (which is fine as the data are sent over the SSL encrypted connection).

Now I want to pro

Answer 1

1. Setting the socket to be secured is done by:

   • setting the secure flag - as you wrote ({secure: true})
   • OR by using https protocol when creating the server (instead of http) - which will set the secure flag to be true automatically

2. Good lib that simplify the authentication process is: https://github.com/auth0/socketio-jwt