Not sure I follow. What do you mean by client auth?
Discussion
There is a NIP for it, but most clients don’t implement it yet. Relays have no way to validate who the user is if they’re only reading (which is why anyone can read from paid relays at this point, and why filter wine requires you to provide your npub in the relay URL). We only can verify who the npub connected is during some types of write EVENTs, where the events are signed.