Make sure that Jitsis JWT allows to join only to the room to which it is granted

rish · February 1, 2023, 11:54am

Hi
Is there option to set or how we can make sure that jitsi jwt allows to join only to room which it is granted?
is it possible?

shawn · February 1, 2023, 12:18pm

Yes, that’s what the “room” claim on the token is for. For example. if you set "room": "abc" then that token can only be used for the “abc” room.

rish · February 1, 2023, 12:28pm

Thank you @shawn
Is there any documentation where I can check this setting ?

shawn · February 1, 2023, 12:33pm

github.com

jitsi/lib-jitsi-meet/blob/master/doc/tokens.md

# JSON Web Token (JWT) authentication Prosody plugin

This plugin implements a **Prosody authentication provider** that verifies a client connection based on a JWT
described in [RFC7519]. It allows use of an external form of authentication with _lib-jitsi-meet_.
Once your user authenticates you need to generate the JWT as described in the RFC and pass it to your client app.
Once it connects with a valid token, it is considered authenticated by the jitsi-meet system.

During configuration, you can choose between two JWT validation methods:

* Shared Secret Validation or
* Public Key Validation 

In both cases you will need to provide the _application ID_ that identifies the client.

For the **Shared Secret Validation** an _application secret_ is shared by both the server (Prosody) and the JWT
generation. Take a look at an example structure in [Example Structure > Shared Secret Validation](#shared-secret-validation).
Like described in the RFC, the _shared secret_ is used to compute a HMAC hash value which allows authentication of the 
generated token. There are many existing libraries which can be used to implement token generation. More info can be 
found here: [http://jwt.io/#libraries-io]

This file has been truncated. show original