How to config Jitsi to allow meeting creation only by API?

Mohammad_Saberi · January 3, 2023, 5:42pm

Hi everyone. I’ve just installed Jitsi on my own server and I am developing a platform which creates new meetings on Jitsi by API. But I require stop creating new meeting manually by using the form inside the welcome page, or creating them by putting a phrase or word in URL. Is it possible in Jitsi to create new meeting by using API only? If so, please help me in this regard…

emrah · January 3, 2023, 5:52pm

You may use the token authentication for prosody

github.com

jitsi/lib-jitsi-meet/blob/master/doc/tokens.md

# JSON Web Token (JWT) authentication Prosody plugin

This plugin implements a **Prosody authentication provider** that verifies a client connection based on a JWT
described in [RFC7519]. It allows use of an external form of authentication with _lib-jitsi-meet_.
Once your user authenticates you need to generate the JWT as described in the RFC and pass it to your client app.
Once it connects with a valid token, it is considered authenticated by the jitsi-meet system.

During configuration, you can choose between two JWT validation methods:

* Shared Secret Validation or
* Public Key Validation 

In both cases you will need to provide the _application ID_ that identifies the client.

For the **Shared Secret Validation** an _application secret_ is shared by both the server (Prosody) and the JWT
generation. Take a look at an example structure in [Example Structure > Shared Secret Validation](#shared-secret-validation).
Like described in the RFC, the _shared secret_ is used to compute a HMAC hash value which allows authentication of the 
generated token. There are many existing libraries which can be used to implement token generation. More info can be 
found here: [http://jwt.io/#libraries-io]

This file has been truncated. show original

Mohammad_Saberi · January 3, 2023, 6:32pm

@emrah, does this approach remove the basic meeting creation mechanism automatically or it will be available and requires something else in configuration?

emrah · January 3, 2023, 6:44pm

If you enable the token authentication by installing jitsi-meet-tokens package, a user can create or participate the meeting if they have a valid token.

If you want to allow guest users after the room is created, in this case you will need some extra steps.