The peerjs connection ID is what is shared.
On first-connection, the keys are generated and exchanged over webrtc. it only does this on the first-time-connection.
On subsequent connections, the keys are used to validate identity else the connection is rejected.