Jitsi-meet: Incorporate maintenance of the JWT plugin Jitsi Meet relies on into the Jitsi project

[dantman]

Please move maintenance of the luajwtjitsi Lua library into the Jitsi project (i.e. fork it to the jitsi GitHub org and allow for contributions just like jitsi-meet).

Background

Token authentication for Jitsi Meet (jitsi-meet-tokens / token related prosody plugins) depends on the luajwtjitsi Lua library.

The Lua library luajwtjitsi (paweldomas/luajwt, luarocks) has not been updated for 3 years. It's a fork of luajwt which was abandoned 4 years ago.

luajwtjitsi depends on the luacrypto library. A project not updated in 6 years and incompatible with the current version of libssl. It appears to be de facto replaced by luaossl.

@ramon-garcia has already kindly done the work of porting luajwtjitsi to using luaossl and made a PR (paweldomas/luajwt#4). But because there is no-one maintaining this jitsi fork of a lua library that is a critical dependency of jitsi-meet's token auth, the contribution has just been left there with no-one to merge it.

Because this is a jitsi-specific fork of a Lua library and is a library that is critical to Jitsi Meet, I think maintenance of it should be under control of the Jitsi community.

[damencho]

This already available in jitsi organization https://github.com/jitsi/luajwt, we just need to find time to work on that ...

[damencho]

@saghul are you aware of the process of pushing a new lua module for lua rocks?

[bill2004158]

any update about this? I cannot install it on Ubuntu 20.

workaround:

1. add "deb http://security.ubuntu.com/ubuntu bionic-security main" to sourcelist
2. sudo apt-get install libssl1.0-dev
   sudo apt-get install liblua5.2-dev
   //make sure luacrypto could be installed
3. sudo luarocks install lua-cjson 2.1.0-1
   //there is some issue about in the latest version, ref https://stackoverflow.com/questions/50281201/symbol-not-found-lua-objlen