Websocket Flutter avec backend Spring-boot

@Configuration
public class WebsocketSecurityConfiguration extends AbstractSecurityWebSocketMessageBrokerConfigurer {

    @Override
    protected void configureInbound(MessageSecurityMetadataSourceRegistry messages) {
        messages
            .nullDestMatcher().authenticated()
            .simpDestMatchers("/topic/tracker").hasAuthority(AuthoritiesConstants.ADMIN)
           .simpSubscribeDestMatchers("/topic/**").authenticated()
            .simpDestMatchers("/topic/**").authenticated()
            // message types other than MESSAGE and SUBSCRIBE
            .simpTypeMatchers(SimpMessageType.MESSAGE, SimpMessageType.SUBSCRIBE).denyAll()
            // catch all
            .anyMessage().denyAll();
    }

    /**
     * Disables CSRF for Websockets.
     */
    @Override
    protected boolean sameOriginDisabled() {
        return true;
    }
}


// spring security configs for http

@Override
    public void configure(HttpSecurity http) throws Exception {
        // @formatter:off
        http
            .csrf()
            .disable()
            .addFilterBefore(corsFilter, UsernamePasswordAuthenticationFilter.class)
            .exceptionHandling()
                .authenticationEntryPoint(problemSupport)
                .accessDeniedHandler(problemSupport)
        .and()
            .headers()
            .contentSecurityPolicy("default-src 'self'; frame-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:")
        .and()
            .referrerPolicy(ReferrerPolicyHeaderWriter.ReferrerPolicy.STRICT_ORIGIN_WHEN_CROSS_ORIGIN)
        .and()
            .featurePolicy("geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'")
        .and()
            .frameOptions()
            .deny()
        .and()
            .sessionManagement()
            .sessionCreationPolicy(SessionCreationPolicy.STATELESS)
        .and()
            .authorizeRequests()
            .antMatchers("/api/**").authenticated()
            .antMatchers("/websocket/tracker").hasAnyAuthority(
                AuthoritiesConstants.ADMIN, AuthoritiesConstants.MANAGER, AuthoritiesConstants.STAFF,
                AuthoritiesConstants.CLIENT, AuthoritiesConstants.DRIVER
            )
            .antMatchers("/websocket/**").permitAll()
            .httpBasic()
        .and()
            .apply(securityConfigurerAdapter());
        // @formatter:on
    }

initClient() async {
    try {

      if (_stompClient != null & _stompClient.connected) {
        return;
      }

      SharedPreferences _prefs = await SharedPreferences.getInstance();
      String token = _prefs.getString('access_token');
      User currentUser = User.fromPrefJson(jsonDecode(_prefs.get('current_user')));
      phone = currentUser.phone;
      if (token != null) {
        String requestUrl = '$baseUrl/websocket/tracker?access_token=$token'; // please note <<<<<
        StompClient stompClient = StompClient(
            config: StompConfig.SockJS(
                url: requestUrl,
                stompConnectHeaders: {
                  'Authorization' : 'Bearer $token', // please note <<<<<
                },
                webSocketConnectHeaders: {
                  'Authorization' : 'Bearer $token', // please note <<<<<
                },
                onStompError: (StompFrame frame) {
                  print('A stomp error occurred in web socket connection :: ${frame.body}');
                },
                onWebSocketError: (dynamic frame) {
                  print('A Web socket error occurred in web socket connection :: ${frame.toString()}');
                },
                onDebugMessage: (dynamic frame) {
                  print('A debug error occurred in web socket connection :: ${frame.toString()}');
                },
                onConnect: (StompClient client, StompFrame connectFrame) {
                  print('${client.toString()} connected with the following frames ${connectFrame.body}');
                  _stompClient = client;

                  clientUnSubscribeFn = _stompClient.subscribe(
                      destination: '/topic/client',  headers: {},
                      callback: (frame) {
                        // Received a frame for this subscription
                        print(frame.body);
                        clientController.add(frame.body);
                      }
                  );
                }
            )
        );
        stompClient.activate();
      }
    } catch(e) {
      print('An error occurred ${e.toString()}');
    }
  }


  sendClientMessage(String msg) async {
      if (_stompClient != null & _stompClient.connected) {
      _stompClient.send(
         destination: '/topic/client',
         body: msg,
        headers: {}
     );
  }
  }