avatar.session from your backend to the browser. Keep your Cloud API key and publisher token on the backend.
React
useAvatar().
Browser custom element
{ ...session, transport: "websocket" }; otherwise they use WebRTC. The built in avatar.viewer_url is the fastest way to watch a session.