Agora Token Helper
Support AgoraToken version 001 - 006. But for security reasons, I recommend using version 006 and above.
1 Analyzer
The analyzer can help you parse the original content of the AgoraToken, which you can use to check whether it is correct.
# Example(appID: 970CA35de60c44645bbae8a215061b33, appCert: 5CFd2fd1755d40ecb72977518be15d3b)
python3 analyzer.py 006970CA35de60c44645bbae8a215061b33IACV0fZUBw+72cVoL9eyGGh3Q6Poi8bgjwVLnyKSJyOXR7dIfRBXoFHlEAABAAAAR/QQAAEAAQCvKDdW
# Output
## version: 006
## [Analyze] AccessToken(V6), Signature: 95d1f654070fbbd9c5682fd7b218687743a3e88bc6e08f054b9f229227239747, AppId: 970CA35de60c44645bbae8a215061b33, CRC(ChannelName): 276646071, CRC(Uid): 3847331927, Ts: 1111111, Salt: 1, privilege: 1:1446455471
2 Checker
If you want to use a checker, you need to modify the configs/project.json file and set the parameters in the file to the one used by the current generated AgoraToken.
# Example(appID: 970CA35de60c44645bbae8a215061b33, appCert: 5CFd2fd1755d40ecb72977518be15d3b)
python3 checker.py 006970CA35de60c44645bbae8a215061b33IACV0fZUBw+72cVoL9eyGGh3Q6Poi8bgjwVLnyKSJyOXR7dIfRBXoFHlEAABAAAAR/QQAAEAAQCvKDdW -c 7d72365eb983485397e3e3f9d460bdda -u 2882341273
# Output
## version: 006
## [Check] AccessToken(V6), Signature: 95d1f654070fbbd9c5682fd7b218687743a3e88bc6e08f054b9f229227239747, AppId: 970CA35de60c44645bbae8a215061b33, CRC(ChannelName): 276646071, CRC(Uid): 3847331927, Ts: 1111111, Salt: 1, privilege: 1:1446455471
## [Check] Error: token expired, now ts: 1642995315, expired at 1111111
## [Check] Error: token privilege expired, privilege: 1, now ts: 1642995315, expired at 1446455471
# -----------------------------------
# Example use wrong channel and user id(appID: 970CA35de60c44645bbae8a215061b33, appCert: 5CFd2fd1755d40ecb72977518be15d3b)
python3 checker.py 006970CA35de60c44645bbae8a215061b33IACV0fZUBw+72cVoL9eyGGh3Q6Poi8bgjwVLnyKSJyOXR7dIfRBXoFHlEAABAAAAR/QQAAEAAQCvKDdW -c abc -u 123
# Output
## version: 006
## [Check] AccessToken(V6), Signature: 95d1f654070fbbd9c5682fd7b218687743a3e88bc6e08f054b9f229227239747, AppId: 970CA35de60c44645bbae8a215061b33, CRC(ChannelName): 276646071, CRC(Uid): 3847331927, Ts: 1111111, Salt: 1, privilege: 1:1446455471
## [Check] Error: token expired, now ts: 1642995508, expired at 1111111
## [Check] Error: token privilege expired, privilege: 1, now ts: 1642995508, expired at 1446455471
## [Check] Error: channel name crc32 not same
## [Check] Error: user id crc32 not same
## [Check] Error: signature not same
You also need to pay attention to whether the privilege settings are correct, which cannot be judged from the token alone. For example, a user who has no privilege cannot send any audio, video, etc.
3 Server
Attention:
- this is a very simple example service that you need to rewrite and check user's permissions very carefully!
- need to follow the actual business needs and don't assign user too much privilege!
- pay attention to the token ttl, don't assign a high permissions(audio, video, etc.) for a long time!
- should also think about the risk of AppCert leaks, which should consider a regularly updates to AppCert, and a blue-green replacement strategy.
If you want to use a server, you need to modify the configs/project.json file and set the parameters in the file to the one used by the current generated AgoraToken.
This part relies on flask and needs to be installed according to the requirements.txt.
# Install
pip3 install -r requirements.txt
# Example(appID: 970CA35de60c44645bbae8a215061b33, appCert: 5CFd2fd1755d40ecb72977518be15d3b)
python3 server.py
# Request
curl -X "POST" "http://127.0.0.1:8080/token/6" \
-H 'Content-Type: application/json; charset=utf-8' \
-d $'{"expired_ts":1586843002,"channel_name":"123","privilege":[1000]}'
# Response
{"app_id":"970CA35de60c44645bbae8a215061b33","token":"006970CA35de60c44645bbae8a215061b33IAB+3uS6z5qjTFNJdj8L/kpoJ361NRzQ5Lr3Ld8cLZ0dJdJjSIgAAAAAKAAQIGcAmrLwYQUAAQB6TZVeAgB6TZVeAwB6TZVeBAB6TZVe6AN6TZVe","channel_name":"123","uid":""}
4 Cautious
'Security and safety were the reward of dullness.' by Hanif Kureishi
6 Aug 7, 2022
4 Mar 9, 2022
1 Jan 13, 2022
1 Jul 9, 2021
1 Jan 18, 2022
74 Dec 26, 2022
53 Sep 25, 2022
5 Jan 24, 2022
62 Dec 8, 2022
21 Mar 08, 2022
6 Jul 14, 2022
5 Apr 21, 2022
9 Dec 31, 2022
1 Oct 21, 2021
8 Jun 17, 2022
18 Dec 01, 2022
22 Jan 11, 2022
1 Feb 04, 2022
1 Feb 08, 2022
1 Dec 25, 2021
35 Dec 25, 2022
3 Dec 28, 2022
1 Jan 12, 2022
163 Jan 05, 2023
205 Dec 20, 2022
31 Nov 01, 2022
287 Nov 26, 2022
4 Oct 02, 2022
574 Dec 26, 2022