[VWWHFSfQ]

> it doesn't use standard auth

I'm not sure what this means because it supports the withCredentials option to send auth headers if allowed by CORS

[osigurdson]

I mean Bearer / JWT

[CharlieDigital]

SSE can be implemented over HTTP GET; there is no difference in handling of JWT tokens in headers.

[osigurdson]

I mean that eventsource doesn't handle it.