JWT token installation -- NEED HELP!

artknight · July 31, 2020, 1:44pm

Dear Jitsi Community, @damencho, @sapkra, @Pawel_Domas, @jespino, @Aaron_K_van_Meerten

PLEASE HELP !!!

Following the official jitsi-meet-tokens installation guide results in luacrypto errors

jitsi/lib-jitsi-meet/blob/master/doc/tokens.md

JWT token authentication Prosody plugin
==================

This plugin implements Prosody authentication provider that verifies client connection based on JWT token described in [RFC7519].
It allows to use any external form of authentication with lib-jitsi-meet. Once your user authenticates you need to
generate the JWT token as described in the RFC and pass it to your client app. Once it connects with valid token is considered authenticated by jitsi-meet system.

During configuration you will need to provide the *application ID* that identifies the client and a *secret* shared by both server and JWT token generator. Like described in the RFC, secret is used to compute HMAC hash value which allows to authenticate generated token. There are many existing libraries which can be used to implement token generator. More info can be found here: [http://jwt.io/#libraries-io]

JWT token authentication currently works only with BOSH connections.

[RFC7519]: https://tools.ietf.org/html/rfc7519
[http://jwt.io/#libraries-io]: http://jwt.io/#libraries-io

### Token structure

The following JWT claims are used in authentication token:
- 'iss' specifies *application ID* which identifies the client app connecting to the server. It should be negotiated with the service provider before generating the token.
- 'room' contains the name of the room for which the token has been allocated. This is *NOT* full MUC room address. Example assuming that we have full MUC 'conference1@muc.server.net' then 'conference1' should be used here.  Alternately, a '*' may be provided, allowing access to all rooms within the domain.
- 'exp' token expiration timestamp as defined in the RFC

This file has been truncated. show original

I would like to know if there is a better step-by-step process to perform the installation.

My server config

No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 20.04.1 LTS
Release:	20.04
Codename:	focal

In addition I was also looking at these notes

github.com

christiancuri/Docs/blob/master/Jitsi Meet Installation.md




# Install lua and dependencies

Enter in sudo user

```bash
sudo su
```

Run the follow script to install lua and her dependencies, and prosody with fixes.
After finish, VM will be restarted
```bash
cd &&
apt-get update -y &&
apt-get install gcc -y &&
apt-get install unzip -y &&
apt-get install lua5.2 -y &&
apt-get install liblua5.2 -y &&

This file has been truncated. show original

BUT the process always fails on luarocks install luacrypto

=====

I understand there are a bunch of outdated threads on how to resolve it but none work any longer. There is also a notion that luacrypto is a very old repo that is not being maintained and we should really use luaossl instead.

I really need someone to point me to a step-by-step guide on how to install the jitsi-meet-tokens successfully WITHOUT wasting weeks of my time. I cannot believe that it should be THIS DIFFICULT!!!

@damencho, @sapkra, @Pawel_Domas, @jespino, @Aaron_K_van_Meerten
or ANYBODY … PLEASE HELP!!!

mjtiempo · August 4, 2020, 3:57am

Updated tutorial here https://github.com/mjtiempo/Docs/blob/master/Jitsi%20Meet%20Installation.md
Video https://youtu.be/9IWWlrBqDj8