仅允许JWT令牌身份验证，并摆脱用户和密码身份验证

Question

在我的Jitsi Meet Prodody配置文件中：~/。jitsi meet cfg/prosody/config/conf.d

我有以下配置：

admins = {
  "[e-mail]",
  "[e-mail]"
}

plugin_paths = { "/prosody-plugins/", "/prosody-plugins-custom" }
http_default_host = "meet.jitsi"

VirtualHost "meet.jitsi"

authentication = "token"
app_id = "this-is-my-app-id"
app_secret = "FF0AE1DEC0F36167A100CF0C234CF4A5"
allow_empty_token = false

ssl = {
  key = "/config/certs/meet.jitsi.key";
  certificate = "/config/certs/meet.jitsi.crt";
}
modules_enabled = {
  "bosh";
  "pubsub";
  "ping";
  "speakerstats";
  "conference_duration";
}

speakerstats_component = "speakerstats.meet.jitsi"
conference_duration_component = "conferenceduration.meet.jitsi"

c2s_require_encryption = false

VirtualHost "auth.meet.jitsi"
ssl = {
  key = "/config/certs/auth.meet.jitsi.key";
  certificate = "/config/certs/auth.meet.jitsi.crt";
}
authentication = "internal_hashed"

VirtualHost "recorder.meet.jitsi"
modules_enabled = {
  "ping";
}
authentication = "internal_hashed"

Component "internal-muc.meet.jitsi" "muc"
storage = "memory"
modules_enabled = {
  "ping";
}
muc_room_locking = false
muc_room_default_public_jids = true

Component "muc.meet.jitsi" "muc"
storage = "memory"
modules_enabled = {
  "muc_meeting_id";
  "token_verification";
}
muc_room_cache_size = 1000
muc_room_locking = false
muc_room_default_public_jids = true

Component "focus.meet.jitsi"
component_secret = "1380629bfbc47acef63de093bcf231ec"

Component "speakerstats.meet.jitsi" "speakerstats_component"
muc_component = "muc.meet.jitsi"

Component "conferenceduration.meet.jitsi" "conference_duration_component"
muc_component = "muc.meet.jitsi"

有了它，我可以通过jwt令牌进行身份验证。

但是，如果我不指定任何令牌，例如：

https://jitsi.mydummyserver.com/test

然后我得到以下提示询问用户和密码：

有没有办法只允许令牌身份验证并完全摆脱那个提示？

谢谢

Answer 1

您可以在/etc/jitsi/meet中的tokenAuthUrl上设置令牌生成的endpoint/

tokenAuthUrl目前未记录。您可以在此处检查tokenAuthUrl的拉取请求

如果想要在会议URL不包含JWT令牌的情况下完全重定向，那么可以在服务器配置中编写一个简单的Nginx或Apache规则。

由于会议URL位于https://meet.example.com?jwt=

location / {

    set $url 1;    

    if ($arg_jwt = ''){
        set $url 0;
    }   

    if ($url = 1){
        return 301 https://$host$request_uri;
    }

    return 301 https://example.com;
 
}

这将重定向到示例。com如果会议URL不包含JWT查询参数