you can secure it on a user by user basis, but limited only to which commands that user can run the attrs are: jsonrpc-allowed-jsapi jsonrpc-allowed-fsapi for fsapi commands and jsapi commands. if you look in the default configs you can see similar settings put in at a global level, the same is possible per user: conf/testing/directory/default.xml:5: <param name="jsonrpc-allowed-methods" value="verto"/> conf/vanilla/directory/default.xml:26: <param name="jsonrpc-allowed-methods" value="verto"/> conf/vanilla/directory/default.xml:27: <!-- <param name="jsonrpc-allowed-event-channels" value="demo,conference,presence"/> -->
On Oct 31, 2016, at 3:00 AM, Donny Hardyanto <hardyanto.donny@gmail.com> wrote:
Hi all,
Is it possible to run JSAPI via verto? Is it as powerfull as Event Socket? Is there any way to secure it? I like to deploy the verto webrtc to website, but dont want any one can abuse and control my FS box via JSAPi/verto.
Thanks,
Donny _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org