i've added a section on authentication to the re-graph readme today, detailing the many weird and wonderful ways of authenticating with the server (of most use for websocket connections from the browser): https://github.com/oliyh/re-graph#authentication