EBS PubSub Whisper

Just in case, you need to whisper to the opaque id of the user, not the userId. whisper-<opaqueId>
And for my JWT I just set these pubsub perms : pubsub_perms: { send: ["*"], },