Administration for room conference

[James Bond]

Sorry kinda new to Antmedia, but is it possible to perform administration for rooms in a conferencing application that connects to Antmedia?

 

Example, like a room can be created or removed from a central hub, and users can be kicked from a conference room, etc without initializing a stream connection thru webrtc adaptors (SDK)?

 

 

 

[Connessione]

Conference is an application on top of the server. So you need to code in the logic for administration. Yes it is very much possible. You will need some knowledge of server side application coding etc. rooms are a bit tricky here. Rooms usually get created as you connect to them in terms of service. But what you can do is have a requirement of username password to connect to the application itself. On server you check the credentials for a given room name.

[Enes Kuluk]

I think connessione summed it up well.

You can check for rest methods from here: http://antmedia.io/rest/

You can find removing streams from conference rooms etc.

Regards,

Enes.

 

[ruell magpayo]

yes i understand that, ofcourse its an application logic, my question was, how will the application server disconnects a certain stream during application trigger of removing a user but i think Enes answered; by using the rest API.  =)

 

But I have a followup question with how to design it, the application sample conference.html is not using an application server and just connect to antmedia server directly using WebRTCAdaptor on the client side to connect and join a room.

 

Now my followup question is related to security,

how can we restrict or secure a room so specific users allowed can only access it? in the sample app, users can just directly connect to the media server since it has no middle man to check. Is there a way we can create a room with password programatically?

I dont see a password field in the endpoint to create a room

​/v2​/broadcasts​/conference-rooms

with a middle application like an application server, using the rest APIs, the application server can create a room and manage from there.

I know that there can be an application on the frontend/client side that will check if the user is logged or not, BUT there is a security flaw,

What will stop a user from connecting to the room just using the room name? the user can just use any standard antmedia app like conference.html and he can join the room if he knows the room name.

maybe perhaps, after connecting to app server, appserver creates a token, forward it to user side and joins a room using these token?

[Enes Kuluk]

There is no check from Server side but again you can do that in application level. You can blacklist from a user to enter a room from upper level. Your users shouldn't know conference.html or you shouldn't provide them.

If this explanation is not enough, I can try to provide a better one.

Best Regards,

Enes.