The 'full' variant sends a key exchange as first WS message, not auth. The 'pure' variant sends raw PCM immediately, no auth. Only ws/ws-fec/ws-full variants send auth JSON. With auth removed, wzp-web accepts all WS connections. Auth is still enforced on the relay (--auth-url) for direct connections. Caddy provides access control at the TLS layer. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2.3 KiB
2.3 KiB