Disable mod_token_verification via custom plugin override to stop guest kicks

Spegnimento

30 marzo 2026 alle ore 18:01 UTC

Autore

Kamo

Impegno

d61d34e

The MUC token_verification module re-validates tokens and demotes guests from PARTICIPANT to VISITOR after ~60 seconds, causing Jicofo to kick them. The module reads its allowlist from MUC component scope, not global scope, so GLOBAL_CONFIG can't fix it. Solution: mount a no-op mod_token_verification.lua via ConfigMap into /prosody-plugins-custom/ which takes priority over /prosody-plugins/. VirtualHost-level auth (token for JWT, Meet-anonymous for guests) still handles initial authentication correctly.