b89809faea
* allow bypassing credential in access token check for certain use cases (SIP server creating dispatch), it's desirable to issue tokens containing credentials so features like auto-egress could continue to function * use this for sip tokens * changeset * test
59 lines
1.7 KiB
Go
59 lines
1.7 KiB
Go
// Copyright 2023 LiveKit, Inc.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package sip
|
|
|
|
import (
|
|
"time"
|
|
|
|
"github.com/livekit/protocol/auth"
|
|
"github.com/livekit/protocol/livekit"
|
|
)
|
|
|
|
type SIPTokenParams struct {
|
|
APIKey string
|
|
APISecret string
|
|
RoomName string
|
|
ParticipantIdentity string
|
|
ParticipantName string
|
|
ParticipantMetadata string
|
|
ParticipantAttributes map[string]string
|
|
RoomPreset string
|
|
RoomConfig *livekit.RoomConfiguration
|
|
}
|
|
|
|
func BuildSIPToken(params SIPTokenParams) (string, error) {
|
|
t := true
|
|
at := auth.NewAccessToken(params.APIKey, params.APISecret).
|
|
SetVideoGrant(&auth.VideoGrant{
|
|
RoomJoin: true,
|
|
Room: params.RoomName,
|
|
CanSubscribe: &t,
|
|
CanPublish: &t,
|
|
CanPublishData: &t,
|
|
CanUpdateOwnMetadata: &t,
|
|
}).
|
|
SetIdentity(params.ParticipantIdentity).
|
|
SetName(params.ParticipantName).
|
|
SetMetadata(params.ParticipantMetadata).
|
|
SetAttributes(params.ParticipantAttributes).
|
|
SetRoomPreset(params.RoomPreset).
|
|
SetRoomConfig(params.RoomConfig).
|
|
SetKind(livekit.ParticipantInfo_SIP).
|
|
SetValidFor(24 * time.Hour).
|
|
SetAllowSensitiveCredentials(true)
|
|
|
|
return at.ToJWT()
|
|
}
|