But when ICE gathering starts, the STUN binding request returns 401 Unauthorized, and no candidates come back. I’ve confirmed that:
I’m not sending any username or credential fields.
No TURN credentials are configured.
This STUN URL previously worked without authentication.
Reproduction Steps:
Create RTCPeerConnection with the above ICE config
Call pc.createOffer() → pc.setLocalDescription()
In the browser console or packet capture, the STUN request to stun.l.google.com:19302 responds with 401.
Questions for the community / Google team:
Has Google recently enabled authentication on its public STUN endpoint?
If so, what credentials (username/password or token) should clients use?
If not, is this a temporary outage or misconfiguration?
Are there any alternative Google-hosted STUN endpoints we can use in the meantime?