Module handshake 

Authenticates the first WebSocket envelope before room admission.

Room selection precedes JWT verification for legacy Odoo tokens. Decoded claims select only a candidate room and become trusted after verification with that room’s key.

Structs

AuthenticatedJoin 🔒

RoomScopedConnectClaims 🔒

Legacy Odoo claims use AuthPayload::channel instead of a room-id claim.

WebSocketAuth 🔒

Proves the selected room authenticated this WebSocket join.

Enums

HandshakeError 🔒

Functions

authenticate 🔒

returns the authenticated room join intent without admitting the user

authenticate_room_scoped_claims 🔒

decode_auth_payload_text

Decodes the single auth envelope required as the first WebSocket frame.

parse_auth_payload 🔒

receive_auth 🔒

reject 🔒

resolve_handshake_room 🔒

Selects the candidate room without trusting decoded claims.

resolve_room_by_id 🔒

verify_auth_payload 🔒