haskal
/
jiti-meet
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

lowercase to fix tokens with uppercase letters (e.g., slack JWTs)

This commit is contained in:
Scott Boone 2021-05-19 15:45:58 -05:00 committed by Дамян Минков
parent 1f41ddd228
commit e6242f5bc7
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
resources/prosody-plugins/token/util.lib.lua
View File

@ -337,11 +337,11 @@ function Util:verify_room(session, room_address)
return true; return true;
end end
local auth_room = session.jitsi_meet_room; local auth_room = string.lower(session.jitsi_meet_room);
if not self.enableDomainVerification then if not self.enableDomainVerification then
-- if auth_room is missing, this means user is anonymous (no token for -- if auth_room is missing, this means user is anonymous (no token for
-- its domain) we let it through, jicofo is verifying creation domain -- its domain) we let it through, jicofo is verifying creation domain
if auth_room and room ~= string.lower(auth_room) and auth_room ~= '*' then if auth_room and room ~= auth_room and auth_room ~= '*' then
return false; return false;
end end
@ -383,7 +383,7 @@ function Util:verify_room(session, room_address)
end end
end end
local auth_domain = session.jitsi_meet_domain; local auth_domain = string.lower(session.jitsi_meet_domain);
local subdomain_to_check; local subdomain_to_check;
if target_subdomain then if target_subdomain then
if auth_domain == '*' then if auth_domain == '*' then
@ -401,7 +401,7 @@ function Util:verify_room(session, room_address)
end end
return room_address_to_verify == jid.join( return room_address_to_verify == jid.join(
"["..string.lower(subdomain_to_check).."]"..string.lower(room_to_check), self.muc_domain); "["..subdomain_to_check).."]"..room_to_check, self.muc_domain);
else else
if auth_domain == '*' then if auth_domain == '*' then
-- check for wildcard in JWT claim, allow access if found -- check for wildcard in JWT claim, allow access if found
@ -412,8 +412,7 @@ function Util:verify_room(session, room_address)
end end
-- we do not have a domain part (multidomain is not enabled) -- we do not have a domain part (multidomain is not enabled)
-- verify with info from the token -- verify with info from the token
return room_address_to_verify == jid.join( return room_address_to_verify == jid.join(room_to_check, subdomain_to_check);
string.lower(room_to_check), string.lower(subdomain_to_check));
end end
end end