It's a JWT with permissions you always need a token, the server validates your NIP98 request and creates a token with your pubkey as the identity and gives you canSubscribe permission to receive audio