JWT Authentication broken

[ClundXIII]

Hi,

It seems that there is an issue with the JWT Authentication wit the latest version:

prosody_1  | modulemanager                                    error	Error initializing module 'auth_token' on 'meet.jitsi': /usr/share/lua/5.4/prosody/util/startup.lua:202: module 'basexx' not found:
prosody_1  | 	no field package.preload['basexx']
prosody_1  | 	no file '/usr/local/share/lua/5.4/prosody/basexx.lua'
prosody_1  | 	no file '/usr/local/share/lua/5.4/basexx.lua'
prosody_1  | 	no file '/usr/local/share/lua/5.4/prosody/basexx/init.lua'
prosody_1  | 	no file '/usr/local/share/lua/5.4/basexx/init.lua'
prosody_1  | 	no file '/usr/local/lib/lua/5.4/prosody/basexx.lua'
prosody_1  | 	no file '/usr/local/lib/lua/5.4/basexx.lua'
prosody_1  | 	no file '/usr/local/lib/lua/5.4/prosody/basexx/init.lua'
prosody_1  | 	no file '/usr/local/lib/lua/5.4/basexx/init.lua'
prosody_1  | 	no file '/usr/share/lua/5.4/prosody/basexx.lua'
prosody_1  | 	no file '/usr/share/lua/5.4/basexx.lua'
prosody_1  | 	no file '/usr/share/lua/5.4/prosody/basexx/init.lua'
prosody_1  | 	no file '/usr/share/lua/5.4/basexx/init.lua'
prosody_1  | 	no file './prosody/basexx.lua'
prosody_1  | 	no file './basexx.lua'
prosody_1  | 	no file './prosody/basexx/init.lua'
prosody_1  | 	no file './basexx/init.lua'
prosody_1  | 	no file '/var/lib/prosody/custom_plugins/share/lua/5.4/basexx.lua'
prosody_1  | 	no file '/var/lib/prosody/custom_plugins/share/lua/5.4/basexx/init.lua'
prosody_1  | 	no file '/usr/local/lib/lua/5.4/prosody/basexx.so'
prosody_1  | 	no file '/usr/local/lib/lua/5.4/basexx.so'
prosody_1  | 	no file '/usr/lib/x86_64-linux-gnu/lua/5.4/prosody/basexx.so'
prosody_1  | 	no file '/usr/lib/x86_64-linux-gnu/lua/5.4/basexx.so'
prosody_1  | 	no file '/usr/lib/lua/5.4/prosody/basexx.so'
prosody_1  | 	no file '/usr/lib/lua/5.4/basexx.so'
prosody_1  | 	no file '/usr/local/lib/lua/5.4/loadall.so'
prosody_1  | 	no file './prosody/basexx.so'
prosody_1  | 	no file './basexx.so'
prosody_1  | 	stack traceback:
prosody_1  | 	[C]: in upvalue '_real_require'
prosody_1  | 	/usr/share/lua/5.4/prosody/util/startup.lua:202: in function 'require'
prosody_1  | 	/prosody-plugins/token/util.lib.lua:4: in main chunk
prosody_1  | 	(...tail calls...)
prosody_1  | 	/prosody-plugins/mod_auth_token.lua:8: in main chunk
prosody_1  | 	[C]: in function 'util.xpcall.xpcall'
prosody_1  | 	/usr/share/lua/5.4/prosody/core/modulemanager.lua:270: in upvalue 'do_load_module'
prosody_1  | 	/usr/share/lua/5.4/prosody/core/modulemanager.lua:353: in function 'core.modulemanager.load'
prosody_1  | 	/usr/share/lua/5.4/prosody/core/usermanager.lua:97: in function 'core.usermanager.initialize_host'
prosody_1  | 	/usr/share/lua/5.4/prosody/util/events.lua:81: in function </usr/share/lua/5.4/prosody/util/events.lua:77>
prosody_1  | 	(...tail calls...)
prosody_1  | 	/usr/share/lua/5.4/prosody/core/hostmanager.lua:108: in function 'core.hostmanager.activate'
prosody_1  | 	/usr/share/lua/5.4/prosody/core/hostmanager.lua:58: in field '?'
prosody_1  | 	/usr/share/lua/5.4/prosody/util/events.lua:81: in function </usr/share/lua/5.4/prosody/util/events.lua:77>
prosody_1  | 	(...tail calls...)
prosody_1  | 	/usr/share/lua/5.4/prosody/util/startup.lua:428: in function 'util.startup.prepare_to_start'
prosody_1  | 	/usr/share/lua/5.4/prosody/util/startup.lua:703: in function 'util.startup.prosody'
prosody_1  | 	/usr/share/lua/5.4/prosody/util/async.lua:156: in upvalue 'func'
prosody_1  | 	/usr/share/lua/5.4/prosody/util/async.lua:144: in function </usr/share/lua/5.4/prosody/util/async.lua:142>

I am using the latest master version of this repo (which should use the "stable" container?) as well as the following settings:

ENABLE_AUTH=1
ENABLE_GUESTS=0
AUTH_TYPE=jwt
JWT_APP_ID
JWT_APP_SECRET

Setting JWT_TOKEN_AUTH_MODULE to token_verification or token_affiliation or renaming jitsi-meet-cfg to force re-creation of the folder didn't help either.

[Galaxy102]

I can confirm this error and can offer to provide further information if needed.

[saghul]

Hum, that's odd, we do install it:

docker-jitsi-meet/prosody/Dockerfile

Line 24 in 1768164

lua-basexx \

[saghul]

Ah FFS, it doesn't provide a lua 5.4 file :-/ https://packages.debian.org/bullseye/all/lua-basexx/filelist

[saghul]

@damencho This must affect the Debian setup too. When we were using luarocks we'd get a working package, not so right now...

[damencho]

Which debian version, latest?

[saghul]

Yep: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914164

[ClundXIII]

Just a heads up: the current master is broken again due to using -unstable images. Switching to tag stable-7577-1 and setting JWT_TOKEN_AUTH_MODULE=token_affiliation works though.

(Not sure if that is intentional, but it looks to me that the commit accidentally slipped onto the master branch)

[saghul]

Unstable gets built every night, so this should be working tomorrow in master.