Identifying user in Web Socket message

How does one map the incoming message to the Worker to a user? I mean, I know the Worker can store state but I assuming it is best not to rely on this. That is, what is the stateless approach? Pass in a token on the inbound message and use that to identify the user?