What i just want to know is : The 'Connection Token', present in all the requests, is creating where ? By whom ? Is it possible to customize it ? How can i apply an AuthorizeAttribute only on the "connect" method ? See, i only want a user to send credentials the first time, then get a token (customized would be great) and use this token to communicate. I precise i use a simple hub, and no persistent connection.

SignalR security : how is it working?

What i just want to know is :

The 'Connection Token', present in all the requests, is creating where ? By whom ? Is it possible to customize it ?
How can i apply an AuthorizeAttribute only on the "connect" method ?

See, i only want a user to send credentials the first time, then get a token (customized would be great) and use this token to communicate.

I precise i use a simple hub, and no persistent connection.