2f47518f57
There's no need to have Jicofo involved in authentication when JWT authentication type is configured in Prosody in which case Prosody plugins are validating the token when user tries to enter a MUC. This mechanism was initially designed for 'internal' Prosody XMPP authentication with guest access. In this mode only admin users are allowed to create MUC rooms and Jicofo is an admin. In this flow, a user first joins from domain with authentication enabled and it will receive a session ID from Jicofo. Now the client will store this session ID in the local storage and use it next time when coming back to Jitsi Meet to make Jicofo create a MUC room for him/her. https://jitsi.github.io/handbook/docs/devops-guide/secure-domain The EXT_JWT mode was an experiment at some point, but now should probably be removed. It may come handy only in case where there is no JWT verification in Prosody and all users connect as anonymous and MUC creation is only allowed to Jicofo.
Jitsi Meet on Docker
Jitsi is a set of Open Source projects that allows you to easily build and deploy secure videoconferencing solutions.
Jitsi Meet is a fully encrypted, 100% Open Source video conferencing solution that you can use all day, every day, for free — with no account needed.
This repository contains the necessary tools to run a Jitsi Meet stack on Docker using Docker Compose.
Installation
The installation manual is available here.
TODO
- Support container replicas (where applicable).
- TURN server.