Disable Jicofo auth module to prevent 1-minute participant kick

Shipped: March 30, 2026 at 5:43 PM UTC
Author: Kamo
Commit: 2562634

Jicofo's AbstractAuthAuthority has a hardcoded 1-minute auth session lifetime that ignores the config file setting. After 60 seconds, Prosody demotes participants from PARTICIPANT to VISITOR role, and Jicofo kicks them with 'reason: gone'. Auth is properly handled by Prosody's token_verification module which validates JWTs at the XMPP level. Jicofo's redundant auth layer was only causing participant disconnects. Also set JICOFO_AUTH_LIFETIME=24h and SingleBridgeSelectionStrategy.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free Forever View Pricing