From Dev.to
Knowing the roomId Was Enough to List and Delete Files: Adding HMAC Room Tokens to a Socket.IO App
I'm building a no-login online clipboard: devices on the same network land in the same room, and files shared there go through Cloudflare R2. This post is about locking the room's file API, which turn...