[bruce-y]

Servers and relays can now accept multiple passwords through comma-separated VPROX_PASSWORDS, alongside the existing literal VPROX_PASSWORD, enabling password rotation and separate client credentials.
Clients continue using one password, and the relay generates its authentication reply with the matching password without changing the wire protocol.
Adds a precomputed hash map for HTTP authentication, empty-password validation, CLI help and rotation documentation, plus tests for parsing, legacy compatibility, both authentication paths, and replay rejection.

Validation passed: go test -race ./... and CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build.

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

---

^{Need help on this PR? Tag @codesmith-bot with what you need. (Staging)}

[blacksmith-staging]

Relay accepts every listed password

Before, only the VPROX_PASSWORD client got in. After, all three configured passwords open a session with a server proof that verifies for that client's password, and a wrong password is still refused.

_Merge-base

_{This PR 6e1cbb91}

Also checked · 2 more claims, all matched observations

Server /connect accepts every listed password
Password list parsing edges

_{Proof on 6e1cbb91}

View full Proof report