Use Cloudron Logins for host protected settings

[mdc773]

@nebulon said in Use Cloudron Logins for host protected settings:

I think a direct link is like a public link share unless the room is protected, so that might be expected on how the app is currently written

even if i enable protection still cant use couldron account

[jdaviescoates]

@mdc773 I think perhaps you're missing something here.

If you're already logged into your Cloudron dashboard in the same browser you visit your MiroTalk app URL, it doesn't prompt for auth - it just magically checks if you're logged in and if you are just automatically logs you in.

But if you visit the same URL in a private tab you should indeed get prompted to login to Cloudron.

At least that's what happens for me.

I am logged into my Cloudron dashboard, so when I visit my MiroTalk URL I arrive here:

But if I visit the same URL in a private tab I get this:

I also just double checked and if you try to visit a join URL of a meeting after the logged in person has left the meeting, it no longer works and you are presented with the login screen again.

[mdc773]

@jdaviescoates awesome i was wondering how i did not think of this

silly me

[nebulon]

@jdaviescoates good guess to resolve this quicker!

[admeister]

Hi there,

re: Mirotalk SFU 1.9.77

I'm trying to configure Mirotalk SFU to only allow logged in Cloudron users to join a room.

If I'm reading this thread correctly, I don't need to include any OIDC settings in the env file anymore - so this is what my env file looks like, attached.

As the host, Mirotalk now (incorrectly) says that I am not logged in myself (even though I launched MiroTalk from my Cloudron admin dashboard), and then it asks me to login with the MiroTalk interface itself (and not the Cloudron login). When I attempt to use my Cloudron login details it says I have invalid credentials.

So do I actually need to configure all the OIDC settings in the env file? If so, can I pls get some guidance on how to arrive at the exact settings needed?

Thank you!
Ads

[MiroTalk]

@admeister said in Use Cloudron Logins for host protected settings:

I'm trying to configure Mirotalk SFU to only allow logged in Cloudron users to join a room.

Simply remove all the old or unnecessary entries from your env file:

Note: The parameter ALLOW_ROOM_CREATION_WITHOUT_HOST is not related to MiroTalk SFU.

To explicitly configure MiroTalk with Cloudron OIDC Authentication (this is also the default behavior if not explicitly set), use the following environment variables:

OIDC_ENABLED=true
OIDC_ALLOW_ROOMS_CREATION_FOR_AUTH_USERS=true

• OIDC_ENABLED=true — Enables OIDC authentication.
• OIDC_ALLOW_ROOMS_CREATION_FOR_AUTH_USERS=true — Allows all authenticated users via OIDC to create their own rooms.

---

If you do not want to use OIDC authentication but still want to define your own user logins, you can disable OIDC and enable MiroTalk SFU internal Host Protection Mode:

# Disable Cloudron OIDC
OIDC_ENABLED=false

# Host protection
HOST_PROTECTED=true
HOST_USER_AUTH=false

# Define host users in the format:
# username:password:displayName:allowedRooms (comma-separated)
HOST_USERS="user1:pass1:user-1:*|user2@mail.com:pass2:user two:*|user3:pass3:user name:*"

• HOST_PROTECTED=true — Enables Host Protection mode.
• HOST_USER_AUTH=false — Disables additional user authentication beyond host users.
• HOST_USERS — List of host users, with * allowing access to all rooms or specific room names separated by commas.

️ After making changes, restart your MiroTalk instance for them to take effect.

---

For a complete environment configuration, check the .env.template file:
Full env example

The environment variables are loaded in config.js and serve both as runtime configuration and documentation for additional features:
Full config.js example

[admeister]

Thank you everyone for your responses.

I'm trying to configure Mirotalk SFU to only allow logged in Cloudron users to join a room.

Realised that the solution was far simpler than I thought - I just needed to add a single line to the .env file:

OIDC_AUTH_REQUIRED=true

Thank you deeply to everyone working on Cloudron and all associated apps... I'm in awe of this community!

Ads