Handle authentication for WebSocket in SvelteKit?

[winston0410]

I have a REST server that implemented WebSocket. A notification will be published from the server through socket, when any of the resources is changed(i.e. POST, PUT, DELETE).

Cookie that stores JWT might be a solution here. So from browser you send a request to the endpoints of sveltekit, which will then handshake with the server with WebSocket enabled, but I guess it cannot pass back the upgraded connection to the browser.

Another approach I have in my might be connecting to the server with socket directly from client of sveltekit, bypassing its backend, and verify the connection by the jwt token stored in cookie.

What do you think about these two approaches?