Erster Commit

2026-08-22 08:40:29 +02:00
commit 875477d425
1961 changed files with 930336 additions and 0 deletions
@@ -0,0 +1,152 @@
+import * as jose from "jose";
+import { claimsToJwtPayload } from "./grants.js";
+const defaultTTL = `6h`;
+const defaultClockToleranceSeconds = 10;
+class AccessToken {
+  /**
+   * Creates a new AccessToken
+   * @param apiKey - API Key, can be set in env LIVEKIT_API_KEY
+   * @param apiSecret - Secret, can be set in env LIVEKIT_API_SECRET
+   */
+  constructor(apiKey, apiSecret, options) {
+    if (!apiKey) {
+      apiKey = process.env.LIVEKIT_API_KEY;
+    }
+    if (!apiSecret) {
+      apiSecret = process.env.LIVEKIT_API_SECRET;
+    }
+    if (!apiKey || !apiSecret) {
+      throw Error("api-key and api-secret must be set");
+    } else if (typeof document !== "undefined") {
+      console.error(
+        "You should not include your API secret in your web client bundle.\n\nYour web client should request a token from your backend server which should then use the API secret to generate a token. See https://docs.livekit.io/client/connect/"
+      );
+    }
+    this.apiKey = apiKey;
+    this.apiSecret = apiSecret;
+    this.grants = {};
+    this.identity = options == null ? void 0 : options.identity;
+    this.ttl = (options == null ? void 0 : options.ttl) || defaultTTL;
+    if (typeof this.ttl === "number") {
+      this.ttl = `${this.ttl}s`;
+    }
+    if (options == null ? void 0 : options.metadata) {
+      this.metadata = options.metadata;
+    }
+    if (options == null ? void 0 : options.attributes) {
+      this.attributes = options.attributes;
+    }
+    if (options == null ? void 0 : options.name) {
+      this.name = options.name;
+    }
+  }
+  /**
+   * Adds a video grant to this token.
+   * @param grant -
+   */
+  addGrant(grant) {
+    this.grants.video = { ...this.grants.video ?? {}, ...grant };
+  }
+  /**
+   * Adds an inference grant to this token.
+   * @param grant -
+   */
+  addInferenceGrant(grant) {
+    this.grants.inference = { ...this.grants.inference ?? {}, ...grant };
+  }
+  /**
+   * Adds a SIP grant to this token.
+   * @param grant -
+   */
+  addSIPGrant(grant) {
+    this.grants.sip = { ...this.grants.sip ?? {}, ...grant };
+  }
+  /**
+   * Adds an observability grant to this token.
+   * @param grant -
+   */
+  addObservabilityGrant(grant) {
+    this.grants.observability = { ...this.grants.observability ?? {}, ...grant };
+  }
+  get name() {
+    return this.grants.name;
+  }
+  set name(name) {
+    this.grants.name = name;
+  }
+  get metadata() {
+    return this.grants.metadata;
+  }
+  /**
+   * Set metadata to be passed to the Participant, used only when joining the room
+   */
+  set metadata(md) {
+    this.grants.metadata = md;
+  }
+  get attributes() {
+    return this.grants.attributes;
+  }
+  set attributes(attrs) {
+    this.grants.attributes = attrs;
+  }
+  get kind() {
+    return this.grants.kind;
+  }
+  set kind(kind) {
+    this.grants.kind = kind;
+  }
+  get sha256() {
+    return this.grants.sha256;
+  }
+  set sha256(sha) {
+    this.grants.sha256 = sha;
+  }
+  get roomPreset() {
+    return this.grants.roomPreset;
+  }
+  set roomPreset(preset) {
+    this.grants.roomPreset = preset;
+  }
+  get roomConfig() {
+    return this.grants.roomConfig;
+  }
+  set roomConfig(config) {
+    this.grants.roomConfig = config;
+  }
+  /**
+   * @returns JWT encoded token
+   */
+  async toJwt() {
+    var _a;
+    const secret = new TextEncoder().encode(this.apiSecret);
+    const jwt = new jose.SignJWT(claimsToJwtPayload(this.grants)).setProtectedHeader({ alg: "HS256" }).setIssuer(this.apiKey).setExpirationTime(this.ttl).setNotBefore(/* @__PURE__ */ new Date());
+    if (this.identity) {
+      jwt.setSubject(this.identity);
+    } else if ((_a = this.grants.video) == null ? void 0 : _a.roomJoin) {
+      throw Error("identity is required for join but not set");
+    }
+    return jwt.sign(secret);
+  }
+}
+class TokenVerifier {
+  constructor(apiKey, apiSecret) {
+    this.apiKey = apiKey;
+    this.apiSecret = apiSecret;
+  }
+  async verify(token, clockTolerance = defaultClockToleranceSeconds) {
+    const secret = new TextEncoder().encode(this.apiSecret);
+    const { payload } = await jose.jwtVerify(token, secret, {
+      issuer: this.apiKey,
+      clockTolerance
+    });
+    if (!payload) {
+      throw Error("invalid token");
+    }
+    return payload;
+  }
+}
+export {
+  AccessToken,
+  TokenVerifier
+};
+//# sourceMappingURL=AccessToken.js.map