[feature] Add support for PASETO tokens
JWT tokens have long been considered too permissive for their own good, in a way that often exposes them to insecurities in regular web application use. Many infosec researchers have started suggesting against their use as a result.
A project that has sprung up and is very popular (especially in the PHP world) is the PASETO, or Platform Agnostic SEcurity TOken. It has all of the portability of JWT tokens, but with strictly defined encryption standards that ensure they are always used safely.
More information and supporting libraries are available here: https://paseto.io/
Worthy of note is that there are two Golang libraries offering wide compatibility with the modern generation of PASETO tokens.
It would be excellent to see this supported for client authentication in Centrifugo, as it would absolutely be the type of token that I would be implementing in any application that required secure authenticating tokens.
Source: centrifugal/centrifugo