my web application handles sessions, so I imagined something like this:
If the user is logged in, the back end of my application asks websockify for an authorization token, and sends that token to the front end of my app, the front when starting a session of vnc (using novnc) sends said token to websockify that knows that this token corresponds to a certain host and password and establishes the connection.