jitsi / jitsi-meet

Jitsi Meet - Secure, Simple and Scalable Video Conferences that you use as a standalone app or embed in your web application.
https://jitsi.org/meet
Apache License 2.0
23.3k stars 6.76k forks source link

Bug: Specifying bad Jitsi server on Android #6873

Open hackerfactor opened 4 years ago

hackerfactor commented 4 years ago

Description:

Entering a bad server url on the android app prevents the user from being able to correct it. (Difficult workaround; may require uninstall and reinstall.)

Steps to reproduce:

About my jitsi server: I’ve forced new rooms to require a moderator (see: https://community.jitsi.org/t/easiest-way-to-secure-jitsi-meet/21330/15). So a user cannot enter a room until someone with a login joins first.

On the android:

  1. Start jitsi app.
  2. Open jitsi settings.
  3. Under the conference block, set the server url. I used “https://mydomain/BadString”. (mydomain is replaced with my actual hostname.) NOTE: This is an error because I added a conference name (BadString), this is a bad server url.
  4. I then tried to join the conference from my displayed list of past conferences. (“FuzzyAvocados”).

The result? First, it wants to join FuzzyAvocados, but it gets the popup about how the conference has not yet started. As long as that popup is on the screen, you cannot get back to the settings.

If I click Cancel or hit the back button, then it immediately tries to connect to the conference “BadString”. This causes that popup to appear again and I can never get back to the settings.

Expected behavior:

The code should check for a bad serverurl when the user enters it.

When the popup appears (waiting for the conference to start), allow the user to go back to settings.

When hitting cancel or going back to settings, do not re-contact the server! (You don't contact the server when the app first starts, so why contact it when going back?)

Actual behavior:

As long as the popup is up, the user cannot go back to settings.

Hitting "cancel" on the popup, or pressing the back button, tries to connect to the bad server url's conference.

Server information:

Client information:

Android 9 Jitsi app from Android Play, 20.1.0 build 3883698

Additional information:

I found a workaround without reinstalling:

  1. While the popup is on the screen, press the android “|||” button to bring up the running apps. This will shrink the Jitisi app to a dark square with a circling icon (waiting to connect).
  2. Kill the running app. The app is dead, but the jitsi square with the loading icon is still there.
  3. Tap the jitsi square to see the widgets and click on “X” to kill it.
  4. Tab the android “|||” icon and kill the running Jitisi app again. Now it is actually dead.
  5. Restart the jitsi app. It will show you the list of previous conferences and you can go to the settings and correct the url.
saghul commented 4 years ago

I think we should do a HEAD request to verify that we are able to load config.js from the server.