Feature request: Optionally disable anonymous login about galene

[jech]

For wildcard passwords, you now say:

"users": {"guest": {"password": {"type": "wildcard"}, "permissions": "present"}}

It's deliberately more verbose, so that you don't accidentally open up the server by omitting the password field.

[gedw99]

BTW there is decent config here: https://github.com/deburau/galene-docker/tree/main/example-configuration-coturn/galene/data

[jech]

Please be aware that the master branch is not always well-tested, but it's what's being used on galene.org, so it should be reasonably stable.

In Galene 0.9, the syntax of user definitions has changed. 0.9 will still parse the old syntax, but it will ignore allow-anonymous. In order to achieve the same result, you need to use the new syntax:

"users": {"": {}}

Explanation: the above creates a user with empty username and disabled password, which forbids this user from logging in. (In the old syntax, lack of a password indicates a wildcard password; in the new syntax, lack of a password indicates that an account is disabled.)

[gedw99]

cheers :)

[jech]

Which branch are you running?

In Galene 0.8, using an empty username is disallowed unless you say

"allow-anonymous": true

In Galene 0.9 (current master), using an empty username is allowed, and there's currently no way to disallow it. If you think the feature is useful, I could add it back.

"" and null seem to do nothing.

The general rule in Galene is that setting "foo": null is always equivalent to omitting the field "foo". This is required if we ever want to use RFC 6902 with Galene. I'll use the empty string for the purpose you suggest.

[TechnologyClassroom]

I'm running the master branch (commit e68ff86) with the LibreJS patch in production right now. I would prefer having the "allow-anonymous": true config option as it could be worthwhile to potentially give more flavor to a faceless crowd. It is only a preference though and not critical.

[TechnologyClassroom]

Does that mean there will not be a method for wildcard passwords in 0.9? I did like that option.

[TechnologyClassroom]

Excellent! Thank you for the clarification!

[TechnologyClassroom]

Tested and it works. Thank you!