Feature request: api call for short-lived ice config

[the-veloper]

https://github.com/mattermost/mattermost-plugin-calls/pull/116/files - implements something like this ,but I cannot understand, if that is applicable for my use case. On first glace it doesn't seem like it does support my case, because it requests short-lived credentials from a turn server, not an API.

My use case:

curl  -H "Authorization: Bearer <REDACTED>"     -H "Content-Type: application/json" -d '{"ttl": 86400}'         https://rtc.live.cloudflare.com/v1/turn/keys/<REDACTED>/credentials/generate-ice-servers

this returns:

{"iceServers":[{"urls":["stun:stun.cloudflare.com:3478","stun:stun.cloudflare.com:53"]},{"urls":["turn:turn.cloudflare.com:3478?transport=udp","turn:turn.cloudflare.com:3478?transport=tcp","turns:turn.cloudflare.com:5349?transport=tcp","turn:turn.cloudflare.com:53?transport=udp","turn:turn.cloudflare.com:80?transport=tcp","turns:turn.cloudflare.com:443?transport=tcp"],"username":"<redacted>","credential":"<redacted>"}]}

my workaround would be to have a pipeline that runs this request and updates the env vars, but that requires a restart of my instance, which is not great.

is it possible to implement this some other way? i am happy to help, if anyone comes up with an implementation proposal.

[streamer45]

We mainly support coturn, which can work without making API calls. It relies on an HMAC that encodes the expiration timestamp, which is encrypted using the TURNStaticAuthSecret setting.

Adding support for credentials generation through Cloudflare should be easy, although we generally avoid introducing third-party dependencies as the plugin is mainly intended for self-hosted use.

my workaround would be to have a pipeline that runs this request and updates the env vars, but that requires a restart of my instance, which is not great.

I think a better approach would be to update the config through an API call or mmctl, e.g.:

mmctl config set PluginSettings.Plugins.com.mattermost.calls.iceserversconfigs '[...]'

[the-veloper]

I think a better approach would be to update the config through an API call or mmctl, e.g.:

mmctl config set PluginSettings.Plugins.com.mattermost.calls.iceserversconfigs '[...]'

Yes, you're right, it looks like updating the environment variables is not taken into account, because the variables are read from the config database.

Adding support for credentials generation through Cloudflare should be easy, although we generally avoid introducing third-party dependencies as the plugin is mainly intended for self-hosted use.

I understand, feel free to close the issue, if you decide not to go forward with this. With the free tier of their TURN server (1TB/month) it seemed like the way to go for us and adding native support would remove a lot of the pain of self-hosting coturn.