Search:

Hi Dejan, you don't need to protect in some way the client request for the token, because, after your Metadata Adapter authenticates the client (even via sendMessage) it can treat any request on the...

If your client needs to open a session before authenticating, hence your Metadata Adapter can accept a session with no authentication and then authenticate the user via a sendMessage, this is fine...