mirror of
https://github.com/DeBrosOfficial/orama.git
synced 2026-03-17 10:46:58 +00:00
8ee606bfb1
- Add signaling package with message types and structures for SFU communication. - Implement client and server message serialization/deserialization tests. - Enhance systemd manager to handle SFU and TURN services, including start/stop logic. - Create TURN server configuration and main server logic with HMAC-SHA1 authentication. - Add tests for TURN server credential generation and validation. - Define systemd service files for SFU and TURN services.
57 lines
1.4 KiB
Go
57 lines
1.4 KiB
Go
package webrtc
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/DeBrosOfficial/network/pkg/logging"
|
|
"github.com/DeBrosOfficial/network/pkg/turn"
|
|
"go.uber.org/zap"
|
|
)
|
|
|
|
const turnCredentialTTL = 10 * time.Minute
|
|
|
|
// CredentialsHandler handles POST /v1/webrtc/turn/credentials
|
|
// Returns fresh TURN credentials scoped to the authenticated namespace.
|
|
func (h *WebRTCHandlers) CredentialsHandler(w http.ResponseWriter, r *http.Request) {
|
|
if r.Method != http.MethodPost {
|
|
writeError(w, http.StatusMethodNotAllowed, "method not allowed")
|
|
return
|
|
}
|
|
|
|
ns := resolveNamespaceFromRequest(r)
|
|
if ns == "" {
|
|
writeError(w, http.StatusForbidden, "namespace not resolved")
|
|
return
|
|
}
|
|
|
|
if h.turnSecret == "" {
|
|
writeError(w, http.StatusServiceUnavailable, "TURN not configured")
|
|
return
|
|
}
|
|
|
|
username, password := turn.GenerateCredentials(h.turnSecret, ns, turnCredentialTTL)
|
|
|
|
// Build TURN URIs — use IPs to bypass DNS propagation delays
|
|
var uris []string
|
|
if h.turnDomain != "" {
|
|
uris = append(uris,
|
|
fmt.Sprintf("turn:%s:3478?transport=udp", h.turnDomain),
|
|
fmt.Sprintf("turn:%s:443?transport=udp", h.turnDomain),
|
|
)
|
|
}
|
|
|
|
h.logger.ComponentInfo(logging.ComponentGeneral, "Issued TURN credentials",
|
|
zap.String("namespace", ns),
|
|
zap.String("username", username),
|
|
)
|
|
|
|
writeJSON(w, http.StatusOK, map[string]interface{}{
|
|
"username": username,
|
|
"password": password,
|
|
"ttl": int(turnCredentialTTL.Seconds()),
|
|
"uris": uris,
|
|
})
|
|
}
|