We generate a token every time a user joins a session (which is developed using a server side scripting language) - it can only be validated once.

 

The token and the conference name is forwarded to a VertoJS client, which validates them using a REST API. If either of them is not validated the session fails.


From: FreeSWITCH-users <freeswitch-users-bounces@lists.freeswitch.org> on behalf of Rick Jarvis <rick@magicmail.mooo.com>
Sent: Monday, March 12, 2018 8:29 PM
To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Verto - audio only between FS and client
 
Yes, that’s excellent documentation, thanks for reminding me of that. 

How exactly did you use the tokens to ensure that people couldn’t invade other sessions, or was that not an issue in your context? ATM I have users connecting to conferences in the format of <conf_myname_token> as the conference name, but it’s proving quite tricky to keep track of, especially if someone logs on from two browsers. Ideally I’d like to just have users connecting to ‘nothing’, with the app transferring the channel to <conf_myname> (and no ability for the client to write their own code to force a connection to <conf_someoneelse>). 

On 12 Mar 2018, at 19:35, Dom Rumsey <domrumsey@hotmail.com> wrote:

Rick, I take it you've been through this https://evoluxbr.github.io/verto-docs/tut/transferring-a-call.html 

I'm fairly new to this too -  we used the concept of tokens and REST API to get the users in the right session. Set useVideo to false to keep it audio only obviously.


From: FreeSWITCH-users <freeswitch-users-bounces@lists.freeswitch.org> on behalf of Michael Jerris <mike@jerris.com>
Sent: Monday, March 12, 2018 6:59 PM
To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Verto - audio only between FS and client
 
in the source code for the client.

> On Mar 12, 2018, at 2:53 PM, Rick Jarvis <rick@magicmail.mooo.com> wrote:
> 
> How would I do that, in the verto config?
> 
>> On 12 Mar 2018, at 18:38, Michael Jerris <mike@jerris.com> wrote:
>> 
>> you can just remove the features you don’t want from the client
>> 
>>> On Mar 12, 2018, at 9:17 AM, Rick Jarvis <rick@magicmail.mooo.com> wrote:
>>> 
>>> What is the best way to remove all call control abilities from the web client, and have just audio between FS and browser? Let me explain what I mean and why:
>>> 
>>> My app server (running on Node) controls all call handling by ESL to FreeSWITCH. As the service is multi-tenant I need to consider security, but all the multi-tenant stuff is on the app server, and I’m trying to avoid the complexities of having multiple domains etc on FS as I would then need to build a way of syncing this with the app server.
>>> 
>>> So, ideally, the browser would connect to FS (via Verto, as I think it is Verto that handles all the clever re-connection stuff?), and would share its call uuid with the app server, which would then handle all the call transfer / conferencing etc using ESL to FS.
>>> 
>>> The sticking point is that I want to make sure that a user can’t instruct Verto to transfer the call to a guessed conference name. At the moment, I have a rather elaborate system of using a randomly generated auth code, which the app server keeps in Redis, and adds to the name of the conference. But the complexities of this are proving problematic in my code.
>>> 
>>> I hope this makes sense, I definitely consider myself to still be very new to webrtc/verto etc, despite having been playing with it for many months now!
>>> 
>>> Hoping for some ideas or guidance.
>>> 
>>> Thanks
>>> R
>> 


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org

FreeSWITCH is an open-source media application designed to support popular protools such as SIP and WebRTC and provides a platform to develop voice and video applications.


http://confluence.freeswitch.org
http://www.cluecon.com

ClueCon is an annual event bringing together all of the open source Telephony and WebRTC developers to collaberate on the latest technology in the communications industry.



FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users

To see the collection of prior postings to the list, visit the FreeSWITCH-users Archives. Using FreeSWITCH-users: To post a message to all the list ...


UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
FreeSWITCH is an open-source media application designed to support popular protools such as SIP and WebRTC and provides a platform to develop voice and video applications.

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org