websocket persistent connection, because the feature of giving small red packets is added to the game, how to verify that the request from the client to the server is sent from WeChat Mini Programs instead of the tool used by the user to intercept token?

public static function onConnect ($client_id)
{

    //======, ==
    //================end======================

}