mirror of
https://github.com/livekit/livekit.git
synced 2026-11-04 09:07:37 +00:00
The WHIP create handler never called ValidateCreateRoom, so with room.auto_create: false a publisher token without roomCreate could create any room over WHIP, while the same join over /rtc gets 404.