websocket

func Dial ¶

func Dial(ctx context.Context, address string) (net.Conn, error)

Dial creates a stream only. The caller must authenticate it with ConnectClient.

func Handler ¶

func Handler(ctx context.Context, b *bridge.Bridge, origins []string) (http.Handler, error)

Handler exposes no admin API. Origins are exact scheme://host values, never wildcard patterns. Clients without Origin still require Bridge authentication.

func ValidateOrigins ¶

func ValidateOrigins(origins []string) error

func ValidateURL ¶

func ValidateURL(address string) error

ValidateURL permits cleartext outer transport only on loopback. Bridge still authenticates and encrypts the inner stream independently of HTTPS proxies.