livekit-server-sdk
Version:
Server-side SDK for LiveKit
152 lines • 4.26 kB
JavaScript
import * as jose from "jose";
import { claimsToJwtPayload } from "./grants.js";
const defaultTTL = `6h`;
const defaultClockToleranceSeconds = 10;
class AccessToken {
/**
* Creates a new AccessToken
* @param apiKey - API Key, can be set in env LIVEKIT_API_KEY
* @param apiSecret - Secret, can be set in env LIVEKIT_API_SECRET
*/
constructor(apiKey, apiSecret, options) {
if (!apiKey) {
apiKey = process.env.LIVEKIT_API_KEY;
}
if (!apiSecret) {
apiSecret = process.env.LIVEKIT_API_SECRET;
}
if (!apiKey || !apiSecret) {
throw Error("api-key and api-secret must be set");
} else if (typeof document !== "undefined") {
console.error(
"You should not include your API secret in your web client bundle.\n\nYour web client should request a token from your backend server which should then use the API secret to generate a token. See https://docs.livekit.io/client/connect/"
);
}
this.apiKey = apiKey;
this.apiSecret = apiSecret;
this.grants = {};
this.identity = options == null ? void 0 : options.identity;
this.ttl = (options == null ? void 0 : options.ttl) || defaultTTL;
if (typeof this.ttl === "number") {
this.ttl = `${this.ttl}s`;
}
if (options == null ? void 0 : options.metadata) {
this.metadata = options.metadata;
}
if (options == null ? void 0 : options.attributes) {
this.attributes = options.attributes;
}
if (options == null ? void 0 : options.name) {
this.name = options.name;
}
}
/**
* Adds a video grant to this token.
* @param grant -
*/
addGrant(grant) {
this.grants.video = { ...this.grants.video ?? {}, ...grant };
}
/**
* Adds an inference grant to this token.
* @param grant -
*/
addInferenceGrant(grant) {
this.grants.inference = { ...this.grants.inference ?? {}, ...grant };
}
/**
* Adds a SIP grant to this token.
* @param grant -
*/
addSIPGrant(grant) {
this.grants.sip = { ...this.grants.sip ?? {}, ...grant };
}
/**
* Adds an observability grant to this token.
* @param grant -
*/
addObservabilityGrant(grant) {
this.grants.observability = { ...this.grants.observability ?? {}, ...grant };
}
get name() {
return this.grants.name;
}
set name(name) {
this.grants.name = name;
}
get metadata() {
return this.grants.metadata;
}
/**
* Set metadata to be passed to the Participant, used only when joining the room
*/
set metadata(md) {
this.grants.metadata = md;
}
get attributes() {
return this.grants.attributes;
}
set attributes(attrs) {
this.grants.attributes = attrs;
}
get kind() {
return this.grants.kind;
}
set kind(kind) {
this.grants.kind = kind;
}
get sha256() {
return this.grants.sha256;
}
set sha256(sha) {
this.grants.sha256 = sha;
}
get roomPreset() {
return this.grants.roomPreset;
}
set roomPreset(preset) {
this.grants.roomPreset = preset;
}
get roomConfig() {
return this.grants.roomConfig;
}
set roomConfig(config) {
this.grants.roomConfig = config;
}
/**
* @returns JWT encoded token
*/
async toJwt() {
var _a;
const secret = new TextEncoder().encode(this.apiSecret);
const jwt = new jose.SignJWT(claimsToJwtPayload(this.grants)).setProtectedHeader({ alg: "HS256" }).setIssuer(this.apiKey).setExpirationTime(this.ttl).setNotBefore(/* @__PURE__ */ new Date());
if (this.identity) {
jwt.setSubject(this.identity);
} else if ((_a = this.grants.video) == null ? void 0 : _a.roomJoin) {
throw Error("identity is required for join but not set");
}
return jwt.sign(secret);
}
}
class TokenVerifier {
constructor(apiKey, apiSecret) {
this.apiKey = apiKey;
this.apiSecret = apiSecret;
}
async verify(token, clockTolerance = defaultClockToleranceSeconds) {
const secret = new TextEncoder().encode(this.apiSecret);
const { payload } = await jose.jwtVerify(token, secret, {
issuer: this.apiKey,
clockTolerance
});
if (!payload) {
throw Error("invalid token");
}
return payload;
}
}
export {
AccessToken,
TokenVerifier
};
//# sourceMappingURL=AccessToken.js.map