From be70fd683c1a170fbb638294c54336a2a04600ab Mon Sep 17 00:00:00 2001
From: Miroslav Pejic <miroslav.pejic.85@gmail.com>
Date: Fri, 11 Jul 2025 09:00:27 +0200
Subject: [PATCH] [mirotalksfu] - improve OIDC

---
 .env.template              | 2 ++
 app/src/config.template.js | 4 ++--
 package-lock.json          | 4 ++--
 package.json               | 2 +-
 public/js/Brand.js         | 2 +-
 public/js/Room.js          | 8 +++-----
 public/js/RoomClient.js    | 2 +-
 7 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.env.template b/.env.template
index 10e4e321..c6e2c34a 100644
--- a/.env.template
+++ b/.env.template
@@ -92,6 +92,8 @@ OIDC_BASE_URL=                                    # OIDC base URL es https://you
 OIDC_CLIENT_ID=clientID                           # OIDC client ID
 OIDC_CLIENT_SECRET=clientSecret                   # OIDC client secret
 OIDC_SECRET=mirotalksfu-oidc-secret               # OIDC secret
+OIDC_AUTH_REQUIRED=false                          # set to true if authentication is required for all routes
+OIDC_AUTH_LOGOUT=true                             # Controls automatic logout from both your app and Auth0 (true|false)
 OIDC_USERNAME_FORCE=true                          # Force the username to match OIDC email or name (true|false)
 OIDC_USERNAME_AS_EMAIL=true                       # Set username as email from OIDC (true|false)
 OIDC_USERNAME_AS_NAME=false                       # Set username as name from OIDC (true|false)
diff --git a/app/src/config.template.js b/app/src/config.template.js
index 2097af92..8b572ae4 100644
--- a/app/src/config.template.js
+++ b/app/src/config.template.js
@@ -343,8 +343,8 @@ module.exports = {
 
                 // Session configuration
                 secret: process.env.OIDC_SECRET || 'mirotalksfu-oidc-secret',
-                authRequired: false, // Whether all routes require authentication
-                auth0Logout: true, // Use provider's logout endpoint
+                authRequired: process.env.OIDC_AUTH_REQUIRED === 'true', // Whether all routes require authentication
+                auth0Logout: process.env.OIDC_AUTH_LOGOUT !== 'false', // Use provider's logout endpoint
 
                 // OAuth/OIDC flow parameters
                 authorizationParams: {
diff --git a/package-lock.json b/package-lock.json
index b0bbbb31..6d126b67 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
     "name": "mirotalksfu",
-    "version": "1.8.90",
+    "version": "1.8.91",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "mirotalksfu",
-            "version": "1.8.90",
+            "version": "1.8.91",
             "license": "AGPL-3.0",
             "dependencies": {
                 "@aws-sdk/client-s3": "^3.844.0",
diff --git a/package.json b/package.json
index ae87cae6..1455058e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "mirotalksfu",
-    "version": "1.8.90",
+    "version": "1.8.91",
     "description": "WebRTC SFU browser-based video calls",
     "main": "Server.js",
     "scripts": {
diff --git a/public/js/Brand.js b/public/js/Brand.js
index 9d404a2f..0d9dcd86 100644
--- a/public/js/Brand.js
+++ b/public/js/Brand.js
@@ -76,7 +76,7 @@ let BRAND = {
     },
     about: {
         imageUrl: '../images/mirotalk-logo.gif',
-        title: '<strong>WebRTC SFU v1.8.90</strong>',
+        title: '<strong>WebRTC SFU v1.8.91</strong>',
         html: `
             <button 
                 id="support-button" 
diff --git a/public/js/Room.js b/public/js/Room.js
index 4203b388..4c83ed0a 100644
--- a/public/js/Room.js
+++ b/public/js/Room.js
@@ -11,7 +11,7 @@ if (location.href.substr(0, 5) !== 'https') location.href = 'https' + location.h
  * @license For commercial or closed source, contact us at license.mirotalk@gmail.com or purchase directly via CodeCanyon
  * @license CodeCanyon: https://codecanyon.net/item/mirotalk-sfu-webrtc-realtime-video-conferences/40769970
  * @author  Miroslav Pejic - miroslav.pejic.85@gmail.com
- * @version 1.8.90
+ * @version 1.8.91
  *
  */
 
@@ -3616,9 +3616,7 @@ function handleRoomClientEvents() {
 // ####################################################
 
 function leaveRoom() {
-    survey && survey.enabled
-        ? leaveFeedback()
-        : redirectOnLeave();
+    survey && survey.enabled ? leaveFeedback() : redirectOnLeave();
 }
 
 function leaveFeedback() {
@@ -5519,7 +5517,7 @@ function showAbout() {
         position: 'center',
         imageUrl: BRAND.about?.imageUrl && BRAND.about.imageUrl.trim() !== '' ? BRAND.about.imageUrl : image.about,
         customClass: { image: 'img-about' },
-        title: BRAND.about?.title && BRAND.about.title.trim() !== '' ? BRAND.about.title : 'WebRTC SFU v1.8.90',
+        title: BRAND.about?.title && BRAND.about.title.trim() !== '' ? BRAND.about.title : 'WebRTC SFU v1.8.91',
         html: `
             <br />
             <div id="about">
diff --git a/public/js/RoomClient.js b/public/js/RoomClient.js
index 376d1879..3eb7b22b 100644
--- a/public/js/RoomClient.js
+++ b/public/js/RoomClient.js
@@ -9,7 +9,7 @@
  * @license For commercial or closed source, contact us at license.mirotalk@gmail.com or purchase directly via CodeCanyon
  * @license CodeCanyon: https://codecanyon.net/item/mirotalk-sfu-webrtc-realtime-video-conferences/40769970
  * @author  Miroslav Pejic - miroslav.pejic.85@gmail.com
- * @version 1.8.90
+ * @version 1.8.91
  *
  */