There's no "authentication" step. You just generate a key pair and send the public key via pigeon.

I built this because I needed dynamic image examples for a learning app, i'm working on. I wanted to load them using standard <img src="..."> tags, which makes sending Authorization headers impossible.