JWT authentication support

Dockerfile

@@ -3,7 +3,14 @@ FROM node:4.3.1
 WORKDIR /usr/src/app
 
 COPY package.json /usr/src/app/
-RUN npm install; mkdir ssl; openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout ssl/server.key -out ssl/server.crt -passin pass:v2ZIZj2jKUap -subj '/CN=localhost/O=Local/C=FI'; cp ssl/server.crt ssl/ca.crt
+RUN npm install; \
+    mkdir ssl; \
+    openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout ssl/server.key -out ssl/server.crt -passin pass:v2ZIZj2jKUap -subj '/CN=localhost/O=Local/C=FI'; \
+    cp ssl/server.crt ssl/ca.crt; \
+    if [ ! -f ssl/ecprivate.key ]; \
+        then openssl ecparam -out ssl/ecprivate.key -name secp256k1 -genkey; \
+        openssl ec -in ssl/ecprivate.key -pubout -out ssl/ecpub.key; \
+    fi
 COPY . /usr/src/app
 
 CMD [ "npm", "start" ]

app/webrtc_app.js

@@ -17,7 +17,7 @@ var inBoundRemoteStatsKeys;
 var outBoundRemoteStatsKeys;
 var pcKeys;
 
-var room = 'foo';
+var room = "'><img src='' onerror=alert('foo') />";
 console.log("Room is " + room);
 
 var temp = Math.floor(Math.random()*10000);
@@ -74,14 +74,13 @@ if (room !== ''){
   //socket.emit('participant', room,myUserId);
   doGetUserMedia(function(status){
     if (status === true) {
-      socket.emit('participant', room,myUserId);
+      socket.emit('participant', room, myUserId);
     }
   });
 }
 
 var appConfig = AppConfiguration();
 var appId = appConfig.appId;
-var appSecret = appConfig.appSecret;
 
 var callStats = new callstats($,io,jsSHA);
 
@@ -488,8 +487,33 @@ function csReportErrorCallback (err, msg){
 var params = {
   //disableBeforeUnloadHandler: false
 };
+var createTokenGeneratorTimer;
+
+var tokenGenerator = (function () {
+  var cached = null;
+  return function(forcenew, callback) {
+    if (!forcenew && cached !== null) {
+      return callback(null, cached);
+    }
+    socket.emit('generateToken', "foobar", function (err, token) {
+      if (err) {
+        console.log('Token generation failed');
+        console.log("try again");
+        return createTokenGeneratorTimer(forcenew, callback);
+      }
+      console.log("got token");
+      callback(null, token);
+    });
+  };
+})();
+
+createTokenGeneratorTimer = function (forcenew, callback) {
+  return setTimeout(function () { console.log("calling tokenGenerator"); tokenGenerator(forcenew, callback);}, 100);
+};
+
+
+callStats.initialize(appId, tokenGenerator, myUserId, csInitCallback,statsCallback);
 
-callStats.initialize(appId, appSecret, myUserId, csInitCallback,statsCallback);
 
 document.getElementById("switchBtn").onclick = switchScreen;
 

index.js

@@ -4,6 +4,9 @@ var http = require('http');
 var https = require('https');
 var fs = require('fs');
 var path = require('path');
+var jwt = require('jsonwebtoken');
+var crypto = require('crypto');
+var config = require('./config.js');
 var numClients = 0;
 
 var usernames = [];
@@ -13,6 +16,9 @@ var ids = {};
 
 var server = http.createServer(app);
 fs.exists = fs.exists || require('path').exists;
+var privKey = null;
+
+privKey = fs.readFileSync('ssl/ecprivate.key');
 
 //app.listen(8080);
 app.root = __dirname;
@@ -22,7 +28,7 @@ server.listen(8080);
 app.use("/", express.static(__dirname + '/app'));
 app.get('/', function (req, res) {
 	console.log("Req ",req);
-	res.sendFile('/app/index.html',{root: __dirname})
+	res.sendFile('/app/index.html',{root: __dirname});
 });
 
 app.get('/dailystatstest', function (req, res) {
@@ -97,6 +103,39 @@ io.sockets.on('connection', function (socket){
 
   });
 
+  socket.on('generateToken', function (data, callback) {
+    if (socket.username === undefined || socket.username === null) {
+      return callback('userNotJoined');
+    }
+    // First generate the JWTID
+    crypto.randomBytes(48, function(err, buffer) {
+      if (err) {
+        return callback(err);
+      }
+      var tokenid = buffer.toString('hex');
+      var token = null;
+      try {
+        // Try to sign teh token
+        token = jwt.sign(
+          {
+            userID: socket.username,
+            appID: config.appID
+          }, privKey,
+          {
+            algorithm: "ES256",
+            jwtid: tokenid,
+            expiresIn: 300, //5 minutes
+            notBefore: -300 //-5 minutes
+          });
+      } catch (error) {
+        console.log(error);
+        return callback(error);
+      }
+      console.log({action: "GrantToken", user: socket.username, tokenid: tokenid});
+      callback(null, token);
+    });
+  });
+
   socket.on('disconnect', function () {
     var room = socket.roomId;
     console.log('User disconnected ',socket.username,room);

package.json

@@ -13,7 +13,8 @@
   "license": "ISC",
   "dependencies": {
     "express": "^4.13.3",
-    "socket.io": "1.3.7"
+    "socket.io": "1.3.7",
+    "jsonwebtoken": "7.0.0"
   },
   "private": true,
   "scripts": {