// the find
simplewebrtc/signalmaster
simple socket.io server for webrtc signaling
A socket.io signaling server for WebRTC peer discovery — handles room joining, ICE candidate exchange, and optional STUN/TURN credential vending. It was the backend companion to SimpleWebRTC.js circa 2013-2016. The repo is explicitly deprecated and frozen.
The STUN/TURN shared-secret vending (draft-uberti-behave-turn-rest) is implemented cleanly and is the one piece that was genuinely non-obvious to write yourself. The Express middleware export (`sockets(server, config)`) makes it easy to embed in an existing app rather than running standalone. Docker support is present and functional for the era.
Abandoned since 2020, last meaningful work was years before that — you are inheriting a security surface with zero upstream fixes. Socket.io version is ancient; the signaling logic has no authentication or room authorization, so anyone who can reach the server can join any room. The TURN credential mechanism predates modern HMAC-time-limited tokens and the linked draft never became an RFC. One 200-line sockets.js file with a single test file — not a foundation you want to build production video on.