Is there any need to authenticate a socket.io connection if it has a shared session with express?
问题 I have seen this question and answer, which explains how to share sessions with Socket.IO 1.x and Express 4.x and this blog which suggests the use of socketio-auth. Is there a need to use both approaches for authentication if you are already sharing sessions with express. Does it add any security advantage? 回答1: If you already have an authenticated session via http in Express, then a socket.io connection is really JUST another http connection (it actually starts with an http connection and is