Chorus supports AUTH and prompts everybody with an AUTH when they first connect.

But it doesn't require AUTH to read.  If they issue a REQ, it responds. It doesn't check if they AUTHed first.

It only checks if they AUTHed as an allowed user for writing events (in most but not all cases).  Read the docs for the details.