WIP: feat: Add built-in LiveKit token service for MatrixRTC #2091

Draft
eleboucher wants to merge 1 commit from eleboucher/continuwuity:feat/livekit-jwt-service into main
Contributor

This pull request adds built-in LiveKit token service for MatrixRTC

Fixes #1911.

Pull request checklist:

  • This pull request targets the main branch, and the branch is named something other than
    main.
  • I have written an appropriate pull request title and my description is clear.
  • I understand I am responsible for the contents of this pull request.
  • I have followed the contributing guidelines:
<!-- In order to help reviewers know what your pull request does at a glance, you should ensure that 1. Your PR title is a short, single sentence describing what you changed 2. You have described in more detail what you have changed, why you have changed it, what the intended effect is, and why you think this will be beneficial to the project. If you have made any potentially strange/questionable design choices, but didn't feel they'd benefit from code comments, please don't mention them here - after opening your pull request, go to "files changed", and click on the "+" symbol in the line number gutter, and attach comments to the lines that you think would benefit from some clarification. --> This pull request adds built-in LiveKit token service for MatrixRTC <!-- Example: This pull request allows us to warp through time and space ten times faster than before by double-inverting the warp drive with hyperheated jump fluid, both making the drive faster and more efficient. This resolves the common issue where we have to wait more than 10 milliseconds to engage, use, and disengage the warp drive when travelling between galaxies. --> <!-- Closes: #... --> Fixes #1911. <!-- Uncomment the above line(s) if your pull request fixes an issue or closes another pull request by superseding it. Replace `#...` with the issue/pr number, such as `#123`. --> **Pull request checklist:** <!-- You need to complete these before your PR can be considered. If you aren't sure about some, feel free to ask for clarification in #dev:continuwuity.org. --> - [x] This pull request targets the `main` branch, and the branch is named something other than `main`. - [x] I have written an appropriate pull request title and my description is clear. - [x] I understand I am responsible for the contents of this pull request. - I have followed the [contributing guidelines][c1]: - [x] My contribution follows the [code style][c2], if applicable. - [x] I ran [pre-commit checks][c1pc] before opening/drafting this pull request. - [x] I have [tested my contribution][c1t] (or proof-read it for documentation-only changes) myself, if applicable. This includes ensuring code compiles. - [x] My commit messages follow the [commit message format][c1cm] and are descriptive. <!-- Notes on these requirements: - While not required, we encourage you to sign your commits with GPG or SSH to attest the authenticity of your changes. - While we allow LLM-assisted contributions, we do not appreciate contributions that are low quality, which is typical of machine-generated contributions that have not had a lot of love and care from a human. Please do not open a PR if all you have done is asked ChatGPT to tidy up the codebase with a +-100,000 diff. - In the case of code style violations, reviewers may leave review comments/change requests indicating what the ideal change would look like. For example, a reviewer may suggest you lower a log level, or use `match` instead of `if/else` etc. - In the case of code style violations, pre-commit check failures, minor things like typos/spelling errors, and in some cases commit format violations, reviewers may modify your branch directly, typically by making changes and adding a commit. Particularly in the latter case, a reviewer may rebase your commits to squash "spammy" ones (like "fix", "fix", "actually fix"), and reword commit messages that don't satisfy the format. - Pull requests MUST pass the `Checks` CI workflows to be capable of being merged. This can only be bypassed in exceptional circumstances. If your CI flakes, let us know in matrix:r/dev:continuwuity.org. - Pull requests have to be based on the latest `main` commit before being merged. If the main branch changes while you're making your changes, you should make sure you rebase on main before opening a PR. Your branch will be rebased on main before it is merged if it has fallen behind. - We typically only do fast-forward merges, so your entire commit log will be included. Once in main, it's difficult to get out cleanly, so put on your best dress, smile for the cameras! --> [c1]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md [c2]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/docs/development/code_style.mdx [c1pc]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#pre-commit-checks [c1t]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#running-tests-locally [c1cm]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#commit-messages
eleboucher force-pushed feat/livekit-jwt-service from f3399d05dd
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Auto Labeler / Apply labels based on changed files (pull_request_target) Successful in 4s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s
Checks / Prek / Check changed files (pull_request) Successful in 4s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m10s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m19s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
to 15e59b3fba
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 11s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 58s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m21s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 9m18s
2026-08-02 16:57:47 +00:00
Compare
eleboucher force-pushed feat/livekit-jwt-service from 15e59b3fba
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 11s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 58s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m21s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 9m18s
to 798de7e65a
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 6s
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 55s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m10s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
2026-08-02 20:06:38 +00:00
Compare
eleboucher force-pushed feat/livekit-jwt-service from 798de7e65a
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 6s
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 55s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m10s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
to d2207c484a
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 55s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m10s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 12m27s
2026-08-02 20:10:09 +00:00
Compare
eleboucher force-pushed feat/livekit-jwt-service from d2207c484a
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 55s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m10s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 12m27s
to 777b70f6bf
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 55s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m6s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 9m34s
2026-08-02 20:39:19 +00:00
Compare
eleboucher force-pushed feat/livekit-jwt-service from 777b70f6bf
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 55s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m6s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 9m34s
to f845b344d3
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 4s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 8s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m13s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m26s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 8m16s
2026-08-02 20:49:09 +00:00
Compare
eleboucher force-pushed feat/livekit-jwt-service from f845b344d3
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 4s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 8s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m13s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m26s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 8m16s
to 2f8e09c38d
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m12s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m13s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
2026-08-03 06:17:16 +00:00
Compare
eleboucher force-pushed feat/livekit-jwt-service from 2f8e09c38d
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m12s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m13s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
to 11810a731a
All checks were successful
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 13s
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 4s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m16s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m15s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 9m54s
2026-08-03 06:22:50 +00:00
Compare
eleboucher force-pushed feat/livekit-jwt-service from 0b4d309f9e
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 4s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 6s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m13s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m44s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 10m39s
to 4c25818bcf
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 4s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m12s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m22s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
2026-08-03 08:21:33 +00:00
Compare
eleboucher force-pushed feat/livekit-jwt-service from 4c25818bcf
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 4s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m12s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m22s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
to 8114a7be69
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 4s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 9s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m8s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m13s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 9m28s
2026-08-03 08:31:34 +00:00
Compare
eleboucher changed title from WIP: feat: Add built-in LiveKit token service for MatrixRTC to feat: Add built-in LiveKit token service for MatrixRTC 2026-08-03 11:05:15 +00:00
eleboucher force-pushed feat/livekit-jwt-service from 8114a7be69
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 4s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 9s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m8s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m13s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 9m28s
to 1d8c48cf48
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 4s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m9s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m23s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 8m20s
2026-08-03 11:05:19 +00:00
Compare
Cargo.toml Outdated
@ -344,0 +344,4 @@
# MSC4195 identifier derivations and LiveKit token minting, shared with the
# standalone lk-jwt-service replacement so the two cannot drift.
[workspace.dependencies.jwt-service-core]
git = "https://github.com/eleboucher/jwt-service-rs.git"
Author
Contributor

this will be to fork here

this will be to fork here
Owner

tip: if in the Original Post you say "Closes #someissuenumber" it'll crosslink for you and autoclose the other issue when merged

tip: if in the Original Post you say "Closes #someissuenumber" it'll crosslink for you and autoclose the other issue when merged
Author
Contributor

@Aranjedeath wrote in #2091 (comment):

tip: if in the Original Post you say "Closes #someissuenumber" it'll crosslink for you and autoclose the other issue when merged

i just left it commented :D

@Aranjedeath wrote in https://forgejo.ellis.link/continuwuation/continuwuity/pulls/2091#issuecomment-33453: > tip: if in the Original Post you say "Closes #someissuenumber" it'll crosslink for you and autoclose the other issue when merged i just left it commented :D
Author
Contributor

needs this PR to be merged continuwuation/jwt-service-rs#1

needs this PR to be merged https://forgejo.ellis.link/continuwuation/jwt-service-rs/pulls/1
@ -1976,0 +2009,4 @@
# Grant `roomCreate` in issued tokens. Only needed if the SFU has
# `room.auto_create` disabled.
#
#auto_create = false
Member

Should this default to true entirely? As per lk-jwt-service recommendation the SFU's room.auto_create will be set to false most of the time. I've also updated docs in !1740 to recommend this behavior

Should this default to true entirely? As per lk-jwt-service [recommendation](https://github.com/element-hq/lk-jwt-service#:~:text=Restricting%20room%20creation%20requires%20two%20pieces%20working%20together) the SFU's `room.auto_create` will be set to false most of the time. I've also updated docs in !1740 to recommend this behavior
eleboucher marked this conversation as resolved
eleboucher force-pushed feat/livekit-jwt-service from 96b1e9ef41
All checks were successful
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 6s
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 55s
Checks / Prek / Check changed files (pull_request) Successful in 5s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m8s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 10m25s
to 000a79a2cf
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m11s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m5s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 11m37s
2026-08-04 16:42:02 +00:00
Compare
@ -1976,0 +1995,4 @@
#
# The server will fail to start if the file cannot be read.
#
#secret_file =
Member

Could a key: secret file be used? This allows reusing the same file for both LiveKit and jwt, like how lk-jwt-service's LIVEKIT_KEY_FILE and LiveKit's --key-file /path/to/keyfile matches with one another

Could a `key: secret` file be used? This allows reusing the same file for both LiveKit and jwt, like how [`lk-jwt-service`'s `LIVEKIT_KEY_FILE`](https://github.com/element-hq/lk-jwt-service#:~:text=Yes-,LIVEKIT%5FKEY%5FFILE) and LiveKit's `--key-file /path/to/keyfile` matches with one another
@ -19,3 +19,3 @@
### 2. Services
Using LiveKit with Matrix requires two services - LiveKit itself, and a service (`lk-jwt-service`) that grants Matrix users permission to connect to it.
Using LiveKit with Matrix requires LiveKit itself, plus a token service that grants Matrix users permission to connect to it.
Member

Not sure how far this PR is, but can docs changes be made in a separate PR?

Not sure how far this PR is, but can docs changes be made in a separate PR?
Owner

if this PR changes things relevant to the documentation, the documentation changes should be bundled so that the docs don't drift out of sync

if this PR changes things relevant to the documentation, the documentation changes should be bundled so that the docs don't drift out of sync
eleboucher force-pushed feat/livekit-jwt-service from 000a79a2cf
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m11s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m5s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 11m37s
to f515870521
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m12s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m22s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
2026-08-12 06:29:35 +00:00
Compare
eleboucher force-pushed feat/livekit-jwt-service from f515870521
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m12s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m22s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
to 1b7e473cf9
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m8s
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m26s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 8m43s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 6s
2026-08-12 06:32:12 +00:00
Compare
eleboucher changed title from feat: Add built-in LiveKit token service for MatrixRTC to WIP: feat: Add built-in LiveKit token service for MatrixRTC 2026-08-18 16:02:34 +00:00
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 6s
Required
Details
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m8s
Required
Details
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m26s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 8m43s
Required
Details
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 6s
Required
Details
This pull request is marked as a work in progress.
This branch is out-of-date with the base branch
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u feat/livekit-jwt-service:eleboucher-feat/livekit-jwt-service
git switch eleboucher-feat/livekit-jwt-service
Sign in to join this conversation.
No reviewers
continuwuation/Owners
No milestone
No project
No assignees
4 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Reference
continuwuation/continuwuity!2091
No description provided.