Q: Will pion/turn also act as a STUN server?
A: Yes.
Q: How do I implement token-based authentication?
A: Replace the username with a token in the AuthHandler. The password sent by the client can be any non-empty string, as long as it matches that used by the GenerateAuthKey function.
Q: Will WebRTC prioritize using STUN over TURN?
A: Yes.