auth in websocat ws-l

[tarasglek]

I would like to be able to do

websocat --exit-on-eof --basic-auth `echo -n 'username:password' | base64` ws-l:0.0.0.0:8810 sh-c:'bash --rcfile emptyrc -i  2>&1' --binary 

To offer a websocket JS-in-webpage-accessible shell server with auth. However at the moment, when i run the command like this it still accepts unauthenticated clients

[tarasglek]

Alternatively it would be helpful to be able to specify /secret-prefix like ws-l:0.0.0.0:8810/secret-prefix

[vi]

If you want to enforce specific prefix, you may want --restrict-uri option:

        --restrict-uri <restrict_uri>
            When serving a websocket, only accept the given URI, like `/ws`
            This liberates other URIs for things like serving static files or proxying.

It does not mean the shell server would be secure.

You may want to handle auth upstream (i.e. on Nginx / Caddy). If you want shell access from browser, you may also find ttyd useful.