Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[IMP] Add per-channel encryption feature #7

Merged
merged 1 commit into from
May 7, 2024

Conversation

ThanhDodeurOdoo
Copy link
Collaborator

This commit adds per-channel encryption to prevent users from signing JWTs for channels that they did not create.

This change is useful for cases like Odoo.SH where multiple parties can use the same SFU with the same credentials.

task-3861455

@ThanhDodeurOdoo ThanhDodeurOdoo force-pushed the master-sfu-sh-compat-tso branch from 64adef0 to cf2ab45 Compare April 12, 2024 07:20
@ThanhDodeurOdoo ThanhDodeurOdoo force-pushed the master-sfu-sh-compat-tso branch from cf2ab45 to 4e0320f Compare April 12, 2024 08:20
@ThanhDodeurOdoo ThanhDodeurOdoo force-pushed the master-sfu-sh-compat-tso branch from 4e0320f to a2c7d95 Compare April 12, 2024 08:27
@ThanhDodeurOdoo ThanhDodeurOdoo force-pushed the master-sfu-sh-compat-tso branch 2 times, most recently from 1fa9363 to 8a4d3ca Compare April 12, 2024 10:23
@ThanhDodeurOdoo ThanhDodeurOdoo force-pushed the master-sfu-sh-compat-tso branch from 8a4d3ca to 0a409a2 Compare April 23, 2024 09:13
@ThanhDodeurOdoo ThanhDodeurOdoo force-pushed the master-sfu-sh-compat-tso branch from 0a409a2 to cc7c640 Compare April 24, 2024 07:09
@ThanhDodeurOdoo ThanhDodeurOdoo force-pushed the master-sfu-sh-compat-tso branch from cc7c640 to d1bd746 Compare April 25, 2024 06:35
ThanhDodeurOdoo added a commit to odoo-dev/odoo that referenced this pull request Apr 25, 2024
This commit adds support for the per-channel encryption SFU feature
introduced in: odoo/sfu#7

This change is useful for cases like Odoo.SH where multiple parties
can use the same SFU with the same credentials.

task-3861455
@ThanhDodeurOdoo ThanhDodeurOdoo force-pushed the master-sfu-sh-compat-tso branch 4 times, most recently from 0fd229e to d220d3c Compare April 26, 2024 05:44
src/services/ws.js Outdated Show resolved Hide resolved
src/services/ws.js Outdated Show resolved Hide resolved
src/services/ws.js Outdated Show resolved Hide resolved
tests/utils/network.js Outdated Show resolved Hide resolved
This commit adds per-channel encryption to prevent users from signing
JWTs for channels that they did not create.

This features works by allowing an additional `key` claim in the JWT
used to request a room. When this claim is set, the JWTs used to
authenticate users are expected to be signed by this new key and not
the "global" SFU key (`AUTH_KEY` global variable).

This change is useful for cases like Odoo.SH where multiple parties
can use the same SFU with the same credentials.

task-3861455
@ThanhDodeurOdoo ThanhDodeurOdoo force-pushed the master-sfu-sh-compat-tso branch from d220d3c to 9607bdc Compare May 7, 2024 12:22
@alexkuhn alexkuhn merged commit 3b3a85b into master May 7, 2024
1 check passed
@alexkuhn alexkuhn deleted the master-sfu-sh-compat-tso branch May 7, 2024 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants