Salt meet room name

Refty · Jul 5, 2023 · 27b14c3 · 27b14c3
1 parent 20d1fc4
commit 27b14c3
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 7 deletions.
diff --git a/app/settings-dev.json b/app/settings-dev.json
@@ -241,7 +241,8 @@
         "identifier": "",
         "iss": "",
         "keyid": "",
-        "sub": ""
+        "sub": "",
+        "salt": ""
     },
 
     "peer": {

diff --git a/core/modules/meet/server/meet.js b/core/modules/meet/server/meet.js
@@ -1,17 +1,16 @@
 import * as jwt from 'jsonwebtoken'
+import crypto from 'crypto'
 
 import { canAccessZone } from '../../../lib/misc'
 
-const { randomUUID } = require('crypto')
-
 const computeRoomName = (zone) => {
     check(zone._id, Match.Id)
 
     log('computeRoomName: start', { zoneId: zone._id })
 
     let { uuid } = zone
     if (!uuid) {
-        uuid = randomUUID()
+        uuid = crypto.randomUUID()
         Zones.update(zone._id, { $set: { uuid } })
     }
 
@@ -104,15 +103,22 @@ Meteor.methods({
 
         log('computeMeetLowLevelRoomName: start', { usersIds })
 
+        const salt = Meteor.settings.meet.salt
         const meetRoomName = usersIds
             .sort((a, b) => a.localeCompare(b))
             .join('-')
             .toLowerCase()
-        updateUserRoomName(meetRoomName)
 
-        log('computeMeetLowLevelRoomName: end', { meetRoomName })
+        const hmac = crypto.createHmac('sha1', salt)
+        hmac.setEncoding('base64')
+        hmac.write(meetRoomName)
+        hmac.end()
+        hashedMeetRoomName = hmac.read().toLowerCase()
+
+        updateUserRoomName(hashedMeetRoomName)
+        log('computeMeetLowLevelRoomName: end', { meetRoomName: hashedMeetRoomName })
 
-        return meetRoomName
+        return hashedMeetRoomName
     },
 })