jech / galene

The Galène videoconference server
https://galene.org
MIT License
899 stars 119 forks source link

WHIP authorization / authentication ? #188

Closed ian-kelling closed 2 months ago

ian-kelling commented 3 months ago

I followed the WHIP instructions in the FAQ, which didn't say anything about authentication, and predictably, it failed, galene output the following:

2024/04/04 02:49:14 WHIP: not authorised: file does not exist 2024/04/04 02:49:14 HTTP server error: not authorised: file does not exist

jech commented 2 months ago

WHIP only support token authentication (Section 4.5.1 of draft-ietf-wish-whip). You need to obtain a token and configure your WHIP client to use it.

The simplest way is to log into the group as an op, then choose invite user in the group menu (click on your own user name in the users list). This will generate a link that ends in "?token=XXX". The value after "token=" is your token.

(Another solution is to use stateless tokens, which are cryptographically signed. Finally, in Galene 0.9 it will be possible to obtain tokens using a REST-like API.)