search

twilio / twilio-video-app-react

A collaboration application built with the twilio-video.js SDK and React.js
Apache License 2.0
1.8k stars 725 forks source link

Upgrade security of the app with a token from our server. Passcode gets in the way when the app is deployed. #825

Closed runnermann closed 9 months ago

runnermann commented 10 months ago

BACKGROUND

  1. As mentioned, the passcode is very weak and vulnerable. Once it is shared, anyone who has the passcode has the ability to create a new session. Additionally, having to redeploy the app every week is a problem. We are building a version of this app that will allow several users to create and host a video-room. We need a means to allow users to start a session and gain access based on data from our token server.
  2. The current configuration and a few blogs are misleading about the ability to set the roomname using "/room/myRoomName", but this feature only works in development mode. The deployed version requires the passcode in order to see the room and username pre-page.

Question Is there a simple way to bypass the passcode requirement? We are able to request a token from our server which secures usage, but the user never reaches this since we cannot bypass the passcode problem.

Thanks.

runnermann commented 9 months ago

Many issues were resolved by manually uploading the token server to the Function Console. Address given in the CLI response to upload the server. Note that 'save' and 'deploy' must both be clicked for this to take effect. This must be done each time you upload. This function is re-written to the default. It is not overridden with --override.