pub async fn run_as<S: Socket>(
app: Arc<App>,
socket: S,
verified: Option<Actor>,
) -> Result<()>Expand description
The same, for a connection whose identity was already decided at the HTTP upgrade.
A browser logged in through crate::oidc carries its credential in a cookie, which the
hello frame cannot see and must not: putting the token in the frame would mean putting it in
the document, where a script can read it. So the upgrade verifies, and hands the result here —
and when it does, the frame’s actor is not consulted at all.