Agora Token Helper
Support AgoraToken version 001 - 006. But for security reasons, I recommend using version 006 and above.
1 Analyzer
The analyzer can help you parse the original content of the AgoraToken, which you can use to check whether it is correct.
# Example(appID: 970CA35de60c44645bbae8a215061b33, appCert: 5CFd2fd1755d40ecb72977518be15d3b)
python3 analyzer.py 006970CA35de60c44645bbae8a215061b33IACV0fZUBw+72cVoL9eyGGh3Q6Poi8bgjwVLnyKSJyOXR7dIfRBXoFHlEAABAAAAR/QQAAEAAQCvKDdW
# Output
## version: 006
## [Analyze] AccessToken(V6), Signature: 95d1f654070fbbd9c5682fd7b218687743a3e88bc6e08f054b9f229227239747, AppId: 970CA35de60c44645bbae8a215061b33, CRC(ChannelName): 276646071, CRC(Uid): 3847331927, Ts: 1111111, Salt: 1, privilege: 1:1446455471
2 Checker
If you want to use a checker, you need to modify the configs/project.json file and set the parameters in the file to the one used by the current generated AgoraToken.
# Example(appID: 970CA35de60c44645bbae8a215061b33, appCert: 5CFd2fd1755d40ecb72977518be15d3b)
python3 checker.py 006970CA35de60c44645bbae8a215061b33IACV0fZUBw+72cVoL9eyGGh3Q6Poi8bgjwVLnyKSJyOXR7dIfRBXoFHlEAABAAAAR/QQAAEAAQCvKDdW -c 7d72365eb983485397e3e3f9d460bdda -u 2882341273
# Output
## version: 006
## [Check] AccessToken(V6), Signature: 95d1f654070fbbd9c5682fd7b218687743a3e88bc6e08f054b9f229227239747, AppId: 970CA35de60c44645bbae8a215061b33, CRC(ChannelName): 276646071, CRC(Uid): 3847331927, Ts: 1111111, Salt: 1, privilege: 1:1446455471
## [Check] Error: token expired, now ts: 1642995315, expired at 1111111
## [Check] Error: token privilege expired, privilege: 1, now ts: 1642995315, expired at 1446455471
# -----------------------------------
# Example use wrong channel and user id(appID: 970CA35de60c44645bbae8a215061b33, appCert: 5CFd2fd1755d40ecb72977518be15d3b)
python3 checker.py 006970CA35de60c44645bbae8a215061b33IACV0fZUBw+72cVoL9eyGGh3Q6Poi8bgjwVLnyKSJyOXR7dIfRBXoFHlEAABAAAAR/QQAAEAAQCvKDdW -c abc -u 123
# Output
## version: 006
## [Check] AccessToken(V6), Signature: 95d1f654070fbbd9c5682fd7b218687743a3e88bc6e08f054b9f229227239747, AppId: 970CA35de60c44645bbae8a215061b33, CRC(ChannelName): 276646071, CRC(Uid): 3847331927, Ts: 1111111, Salt: 1, privilege: 1:1446455471
## [Check] Error: token expired, now ts: 1642995508, expired at 1111111
## [Check] Error: token privilege expired, privilege: 1, now ts: 1642995508, expired at 1446455471
## [Check] Error: channel name crc32 not same
## [Check] Error: user id crc32 not same
## [Check] Error: signature not same
You also need to pay attention to whether the privilege settings are correct, which cannot be judged from the token alone. For example, a user who has no privilege cannot send any audio, video, etc.
3 Server
Attention:
- this is a very simple example service that you need to rewrite and check user's permissions very carefully!
- need to follow the actual business needs and don't assign user too much privilege!
- pay attention to the token ttl, don't assign a high permissions(audio, video, etc.) for a long time!
- should also think about the risk of AppCert leaks, which should consider a regularly updates to AppCert, and a blue-green replacement strategy.
If you want to use a server, you need to modify the configs/project.json file and set the parameters in the file to the one used by the current generated AgoraToken.
This part relies on flask and needs to be installed according to the requirements.txt.
# Install
pip3 install -r requirements.txt
# Example(appID: 970CA35de60c44645bbae8a215061b33, appCert: 5CFd2fd1755d40ecb72977518be15d3b)
python3 server.py
# Request
curl -X "POST" "http://127.0.0.1:8080/token/6" \
-H 'Content-Type: application/json; charset=utf-8' \
-d $'{"expired_ts":1586843002,"channel_name":"123","privilege":[1000]}'
# Response
{"app_id":"970CA35de60c44645bbae8a215061b33","token":"006970CA35de60c44645bbae8a215061b33IAB+3uS6z5qjTFNJdj8L/kpoJ361NRzQ5Lr3Ld8cLZ0dJdJjSIgAAAAAKAAQIGcAmrLwYQUAAQB6TZVeAgB6TZVeAwB6TZVeBAB6TZVe6AN6TZVe","channel_name":"123","uid":""}
4 Cautious
'Security and safety were the reward of dullness.' by Hanif Kureishi
6 Aug 7, 2022
4 Mar 9, 2022
1 Jan 13, 2022
1 Jul 9, 2021
1 Jan 18, 2022
74 Dec 26, 2022
53 Sep 25, 2022
5 Jan 24, 2022
62 Dec 8, 2022
255 Dec 23, 2022
552 Dec 19, 2022
10 Dec 28, 2022
3 Jan 04, 2022
3.8k Dec 31, 2022
10 Jun 23, 2022
1 Nov 15, 2021
2 Jan 27, 2022
6 Oct 17, 2022
552 Dec 28, 2022
35 Dec 23, 2022
4 Jan 01, 2022
2 Oct 19, 2021
0 Aug 11, 2021
8 Nov 17, 2022
2 Nov 28, 2021
183 Jan 04, 2023
1 Jan 07, 2022
20 Sep 29, 2022
6 Mar 15, 2022