Disable mod_token_verification via custom plugin override to stop guest kicks

Shipped

30 Maret 2026 pukul 18.01 UTC

Author

Kamo

Commit

d61d34e

The MUC token_verification module re-validates tokens and demotes guests from PARTICIPANT to VISITOR after ~60 seconds, causing Jicofo to kick them. The module reads its allowlist from MUC component scope, not global scope, so GLOBAL_CONFIG can't fix it. Solution: mount a no-op mod_token_verification.lua via ConfigMap into /prosody-plugins-custom/ which takes priority over /prosody-plugins/. VirtualHost-level auth (token for JWT, Meet-anonymous for guests) still handles initial authentication correctly.