OptionalallowedOptionalallowedBrowser origins allowed to connect (exact match, e.g.
"https://app.example.com"). A handshake with any other Origin is
refused with 403, which blocks cross-site WebSocket hijacking; requests
without an Origin (non-browser clients) are allowed. Default: any origin.
OptionalauthenticateAuthenticate the upgrade request (see Authenticate). Default: none.
OptionalcanGate ctx.join; deny by returning false. Defaults to allow-all.
OptionalcanGate ctx.broadcast; deny by returning false. Defaults to allow-all.
OptionalmaxMax inbound frame size in bytes. Defaults to 16 KiB.
OptionalportPort to listen on. Defaults to 3001; 0 picks a free port (read it from driver.port).
OptionalrateMax inbound messages per connection per window. Defaults to 100.
OptionalrateRate-limit window in ms. Defaults to 1000.
Optionalrouter
Allowed fallback event names; when set, others are dropped.