Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[1.x] Janus SIP Custom headers length #3459

Closed
l-alexandrov opened this issue Oct 22, 2024 · 4 comments
Closed

[1.x] Janus SIP Custom headers length #3459

l-alexandrov opened this issue Oct 22, 2024 · 4 comments
Labels
multistream Related to Janus 1.x

Comments

@l-alexandrov
Copy link

What version of Janus is this happening on?
v1.1.2

Have you tested a more recent version of Janus too?
No. The problem is on the master branch too.

Was this working before?
I don't know.

Is there a gdb or libasan trace of the issue?
No.

Additional context
The custom headers' values are truncated to 255 characters. We need to transmit JSON Web Token Authentication headers which are much longer than 255 characters.
https://github.com/meetecho/janus-gateway/blob/master/src/plugins/janus_sip.c#L1624-L1650

@l-alexandrov l-alexandrov added the multistream Related to Janus 1.x label Oct 22, 2024
@lminiero
Copy link
Member

I think that 255 is hardcoded in a couple of other places as well. It should be an easy fix, though. I'll have a look later today and push a fix in case.

@lminiero
Copy link
Member

I increased the size from 255 to 1024, I hope that's enough (how large can those tokens be 😛 )
As a side note, 1.1.2 is almost two years old: you should seriously consider upgrading, since there have been a ton of fixes to both the core and the SIP plugin in the meanwhile (you can refer to the changelog for details).

@l-alexandrov
Copy link
Author

Thanks for the quick reaction. The increasing of the limit will reveal very great potential to developers using Janus!

Specifically for authentication though, when using JWTs, we usually use at least 2048-bit keys for signing them. (Reference)

For example, Laravel (Passport) by default generates 4096 bit keys.
That makes the tokens' length vary between 1200-2000 characters for an average JWT payload.

I see that this may look extremely long, but it's kind of standard. In these days a bare minimum according to me.
What's more, most of the HTTP servers have ~2Kb limit for a single HTTP header.

So, may we increase the length to at least 2048 characters?

@lminiero
Copy link
Member

Ack, just done.

natikaltura pushed a commit to natikaltura/janus-gateway that referenced this issue Nov 7, 2024
natikaltura pushed a commit to natikaltura/janus-gateway that referenced this issue Nov 7, 2024
mwalbeck pushed a commit to mwalbeck/docker-janus-gateway that referenced this issue Nov 28, 2024
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [meetecho/janus-gateway](https://github.com/meetecho/janus-gateway) | minor | `v1.2.4` -> `v1.3.0` |

---

### Release Notes

<details>
<summary>meetecho/janus-gateway (meetecho/janus-gateway)</summary>

### [`v1.3.0`](https://github.com/meetecho/janus-gateway/blob/HEAD/CHANGELOG.md#v130---2024-11-25)

[Compare Source](meetecho/janus-gateway@v1.2.4...v1.3.0)

-   Refactored logging internals \[[PR-3428](meetecho/janus-gateway#3428)]
-   Use strtok to parse SDPs \[[PR-3424](meetecho/janus-gateway#3424)]
-   Fixed rare condition that could lead to a deadlock in the VideoRoom \[[PR-3446](meetecho/janus-gateway#3446)]
-   Fixed broken switch when using remote publishers in VideoRoom \[[PR-3447](meetecho/janus-gateway#3447)]
-   Added SRTP support to VideoRoom remote publishers (thanks [@&#8203;spscream](https://github.com/spscream)!) \[[PR-3449](meetecho/janus-gateway#3449)]
-   Added support for generic JSON metadata to VideoRoom publishers (thanks [@&#8203;spscream](https://github.com/spscream)!) \[[PR-3467](meetecho/janus-gateway#3467)]
-   Fixed deadlock in VideoRoom when failing to open a socket for a new RTP forwarder (thanks [@&#8203;spscream](https://github.com/spscream)!) \[[PR-3468](meetecho/janus-gateway#3468)]
-   Fixed deadlock in VideoRoom caused by reverse ordering of mutex locks \[[PR-3474](meetecho/janus-gateway#3474)]
-   Fixed memory leaks when using remote publishers in VideoRoom \[[PR-3475](meetecho/janus-gateway#3475)]
-   Diluted frequency of PLI in the VideoRoom (thanks [@&#8203;natikaltura](https://github.com/natikaltura)!) \[[PR-3423](meetecho/janus-gateway#3423)]
-   Better cleanup after failed mountpoint creations in Streaming plugin \[[PR-3465](meetecho/janus-gateway#3465)]
-   Fixed compilation of AudioBridge in case libogg isn't available (thanks [@&#8203;tmatth](https://github.com/tmatth)!) \[[PR-3438](meetecho/janus-gateway#3438)]
-   Better management of call cleanup in SIP plugin \[[Issue-3430](meetecho/janus-gateway#3430)]
-   Change the way call-IDs are tracked in the SIP plugin (thanks WebTrit!) \[[PR-3443](meetecho/janus-gateway#3443)]
-   Increased maximum size of custom SIP headers \[[Issue-3459](meetecho/janus-gateway#3459)]
-   Other smaller fixes and improvements (thanks to all who contributed pull requests and reported issues!)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yOC4wIiwidXBkYXRlZEluVmVyIjoiMzkuMjguMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->

Reviewed-on: https://git.walbeck.it/walbeck-it/docker-janus-gateway/pulls/157
Co-authored-by: renovate-bot <[email protected]>
Co-committed-by: renovate-bot <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
multistream Related to Janus 1.x
Projects
None yet
Development

No branches or pull requests

2 participants