Best way to tell two users apart?

[gillerby]

e.g., User A connects to the page, then due to poor internet connection disconnects, then reconnects.

Supposing socket.io's reconnect feature fails, how can I check whether this user is the same as user A?

IP is not a reliable method, since on top two users in the same house can have the same IP and this wouldn't allow to differentiate them.

The socket.id seems to change when you reload the page for example, so for reconnection doesn't seem ideal.

[HeroOfOdyssey]

have client send a cookie based identifier, preferrably on top of something like a server verified jwt to ensure no MITM or cookie stealing occurs.