Update PoliticTalk Jitsi room policy

scripts/local-jitsi-setup.sh

@@ -67,7 +67,7 @@ set_env HTTP_PORT "$HTTP_PORT"
 set_env HTTPS_PORT "$HTTPS_PORT"
 set_env PUBLIC_URL "$PUBLIC_URL"
 
-set_env ENABLE_PREJOIN_PAGE 1
+set_env ENABLE_PREJOIN_PAGE 0
 set_env ENABLE_WELCOME_PAGE 1
 set_env ENABLE_NOISY_MIC_DETECTION 1
 set_env ENABLE_NO_AUDIO_DETECTION 1
@@ -86,6 +86,37 @@ set_env DYNAMIC_BRANDING_URL /images/politictalk/branding.json
 set_env TOOLBAR_BUTTONS microphone,chat,raisehand,fullscreen,noisesuppression,participants-pane,hangup
 set_env HIDE_PREMEETING_BUTTONS microphone,camera,select-background,invite,settings
 set_env HIDE_PREJOIN_EXTRA_BUTTONS no-audio,by-phone
+set_env XMPP_MUC_MODULES politictalk_roles
+
+set_env ENABLE_AUTH 0
+set_env AUTH_TYPE internal
+set_env ENABLE_GUESTS 0
+set_env JICOFO_ENABLE_AUTH 0
+set_env ENABLE_AUTO_OWNER 1
+set_env ENABLE_MODERATOR_CHECKS 0
+set_env WAIT_FOR_HOST_DISABLE_AUTO_OWNERS false
+
+if [[ "${ENABLE_POLITICTALK_JWT_AUTH:-0}" == "1" ]]; then
+    if [[ -z "${POLITICTALK_JITSI_JWT_APP_ID:-}" || -z "${POLITICTALK_JITSI_JWT_APP_SECRET:-}" ]]; then
+        echo "Set POLITICTALK_JITSI_JWT_APP_ID and POLITICTALK_JITSI_JWT_APP_SECRET before enabling local JWT auth."
+        exit 1
+    fi
+
+    set_env ENABLE_AUTH 1
+    set_env AUTH_TYPE jwt
+    set_env ENABLE_GUESTS 0
+    set_env JWT_APP_ID "$POLITICTALK_JITSI_JWT_APP_ID"
+    set_env JWT_APP_SECRET "$POLITICTALK_JITSI_JWT_APP_SECRET"
+    set_env JWT_ACCEPTED_ISSUERS "$POLITICTALK_JITSI_JWT_APP_ID"
+    set_env JWT_ACCEPTED_AUDIENCES "${POLITICTALK_JITSI_JWT_AUDIENCE:-jitsi}"
+    set_env JWT_ALLOW_EMPTY 0
+    set_env JWT_ENABLE_DOMAIN_VERIFICATION 0
+    set_env JICOFO_AUTH_TYPE jwt
+    set_env JICOFO_ENABLE_AUTH 1
+    set_env ENABLE_AUTO_OWNER 0
+    set_env ENABLE_MODERATOR_CHECKS 1
+    set_env WAIT_FOR_HOST_DISABLE_AUTO_OWNERS true
+fi
 
 mkdir -p "$CONFIG_DIR"/{web,transcripts,prosody/config,prosody/prosody-plugins-custom,jicofo,jvb,jigasi,jibri}