<?php

declare(strict_types=1);

namespace Blax\WebRtc\Authorization;

use Blax\WebRtc\Contracts\RoomAuthorizer;

/**
 * Secure default: DENIES every private/presence join. The host app must bind its
 * own RoomAuthorizer (via `config('webrtc.authorizer')`) that validates a token /
 * the authenticated user and returns the member's presence info. Public and
 * open-presence rooms don't consult the authorizer, so they still work out of the box.
 */
final class DefaultRoomAuthorizer implements RoomAuthorizer
{
    public function authorize(string $peerId, string $roomId, array $auth): ?array
    {
        return null;
    }
}
