Jun2014

In our case, we supports anonymous clients. We plan to issue signalr service endpoint and JWT access token back to the client, without specifying user id or auto-generate an unique...

Any idea to mitigate this? This sounds like a simple DOS.