[PBI] WebSocket Service - Server, Authentication, and Sessions

[jinseisieko]

Description & Context

Handle the WebSocket upgrade process, JWT validation, jwt:revoked checks, and channel_id verification. Return specific close codes for failures (4001-4004). Implement a Heartbeat mechanism (5s) and a TTL (10s) for ws:session keys in Redis to track active connections.

Acceptance Criteria

AC 1

• Given an invalid JWT, When connecting, Then the connection is closed with code 4001.

AC 2

• Given a revoked JWT, When connecting, Then the connection is closed with code 4002.

AC 3

• Given a connected client, When 5 seconds pass without a heartbeat, Then the session TTL is refreshed or the connection is timed out after 10 seconds.

Assigned Reviewer

No response