This tool uses the sub_client_login (the packet used for split screen) with the realm owners XUID. The server does not validate if the user authenticated to Xbox Live and lets the sub client join.
The Javascript clients for Kubernetes is implemented in typescript, but can be called from either Javascript or Typescript. The client is implemented for server-side use with Node.