snapshot of https://github.com/jitsi/jitsi-meet.git @ fd1749dd28f4138aa80234fc7f311b19aaffa0e7 (2026-09-15)

resources/prosody-plugins/mod_jitsi_session.lua

@@ -0,0 +1,71 @@
+-- Jitsi session information
+-- Copyright (C) 2021-present 8x8, Inc.
+--
+-- Hooks the BOSH and WebSocket session-init events to extract Jitsi-specific
+-- parameters from the URL query string and request headers, then stores them
+-- on the session object for use by other modules:
+--
+--   session.previd              -- ?previd=   for smacks session resumption; lets
+--                               --            mod_auth_jitsi-anonymous re-use the same
+--                               --            anonymous JID after a reconnect
+--   session.customusername      -- ?customusername=  pre-set JID, used with the
+--                               --                   "pre-jitsi-authentication" event
+--   session.jitsi_web_query_room   -- ?room=   Jitsi conference room name
+--   session.jitsi_web_query_prefix -- ?prefix= optional tenant prefix (defaults to "")
+--   session.auth_token          -- ?token= or Authorization: Bearer <token> header;
+--                               --         populated without validation — downstream
+--                               --         modules (mod_auth_token, etc.) validate it
+--   session.user_region         -- value of the configurable proxy header
+--                               --   (region_header_name option, default x_proxy_region)
+--   session.user_agent_header   -- User-Agent request header
+module:set_global();
+
+local formdecode = require "util.http".formdecode;
+local region_header_name = module:get_option_string('region_header_name', 'x_proxy_region');
+
+function init_session(event)
+    local session, request = event.session, event.request;
+    local query = request.url.query;
+
+    local token = nil;
+
+    -- extract token from Authorization header
+    if request.headers["authorization"] then
+        -- assumes the header value starts with "Bearer "
+        token = request.headers["authorization"]:sub(8,#request.headers["authorization"])
+    end
+
+    if query ~= nil then
+        local params = formdecode(query);
+
+        -- previd is used together with https://modules.prosody.im/mod_smacks.html
+        -- the param is used to find resumed session and re-use anonymous(random) user id
+        session.previd = query and params.previd or nil;
+
+        -- customusername can be used with combination with "pre-jitsi-authentication" event to pre-set a known jid to a session
+        session.customusername = query and params.customusername or nil;
+
+        -- The room name and optional prefix from the web query
+        session.jitsi_web_query_room = params.room;
+        session.jitsi_web_query_prefix = params.prefix or "";
+
+        -- The following fields are filled in the session, by extracting them
+        -- from the query and no validation is being done.
+        -- After validating auth_token will be cleaned in case of error and few
+        -- other fields will be extracted from the token and set in the session
+
+        if params and params.token then
+            token = params.token;
+        end
+
+    end
+
+    session.user_region = request.headers[region_header_name];
+
+    -- in either case set auth_token in the session
+    session.auth_token = token;
+    session.user_agent_header = request.headers['user_agent'];
+end
+
+module:hook_global("bosh-session", init_session, 1);
+module:hook_global("websocket-session", init_session, 1);