return session;
}
// check the activation key matches.
final EJString activationKey = ejObject.get(MessageParts.WebSocketToken.name()).isString();
if (activationKey == null || !WebSocketTokenManager.verifyOneTimeToken(session, activationKey.stringValue())) {
// nope. go away!
final String error = "bad negotiation key";
LOGGER.debug("activation key not match for session: {}", session.getSessionId());
sendMessage(queueChannel, WebSocketNegotiationMessage.getFailedNegotiation(error));