Namespace Uniform.LiveKit.Authorization

Classes

AuthorizationException

A refused request, with the HTTP status and Matrix error code to answer with.

DelayedLeaveKeeper

Keeps the delayed leaves (MSC4140) that members handed over: while a member is on LiveKit, its delayed leave is restarted before it goes off; once LiveKit no longer has the member, the leave is sent at once, so the member's call membership ends.

FederationOpenIdVerifier

Verifies OpenID tokens over the federation API, GET /_matrix/federation/v1/openid/userinfo, at the address the server name delegates to by /.well-known/matrix/server, else at port 8448.

HomeserverDelayedEvents

Acts on delayed events through the client-server API of the user's homeserver, found from the server name by its /.well-known/matrix/client, never from a URL the client gave, so the service calls only real homeservers.

LiveKitAuthorizer

Exchanges Matrix OpenID tokens for LiveKit access tokens to a call's room, as lk-jwt-service does: the user is verified with their homeserver; users of full-access homeservers may publish and get the room created, others only join rooms that exist.

LiveKitAuthorizerOptions

What LiveKitAuthorizer needs: the LiveKit server, its API key, and whose users may start calls.

Interfaces

IDelayedEvents

Acts on members' delayed events (MSC4140) at their homeservers: restarts them, or sends them at once.

IOpenIdVerifier

Verifies a Matrix OpenID token with the homeserver that issued it.

IRoomMembership

Tells whether a user is joined to a Matrix room, for a service that knows the room's state, such as one inside a homeserver; LiveKitAuthorizer then gives tokens only to the room's joined members.