chore: add lab for securing sip.js with jwt tokens

.gitignore

@@ -0,0 +1 @@
+node_modules

securing_sipjs_with_ephemeral_agents/compose.yaml

@@ -0,0 +1,22 @@
+version: "3"
+
+services:
+  routr:
+    image: fonoster/routr-one:latest
+    environment:
+      EXTERNAL_ADDRS: ${DOCKER_HOST_ADDRESS}
+      CONNECT_VERIFIER_PUBLIC_KEY_PATH: /keys/public.key
+    ports:
+      - 51908:51908
+      - 5062:5062
+    volumes:
+      - shared:/var/lib/postgresql/data
+      - ./work/public.key:/keys/public.key
+
+  simplephone:
+    image: psanders/simplephone:latest
+    ports:
+      - 8080:8080
+
+volumes:
+  shared:

securing_sipjs_with_ephemeral_agents/work/create-jwt.js

@@ -0,0 +1,19 @@
+const fs = require("fs");
+const jwt = require("jsonwebtoken");
+
+const privateKey = fs.readFileSync("private.key");
+
+const payload = {
+  ref: "agent-01",
+  domainRef: "domain-01",
+  aor: "sip:[email protected]",
+  aorLink: "sip:[email protected]",
+  domain: "sip.local",
+  privacy: "NONE",
+  allowedMethods: ["INVITE", "REGISTER"]
+};
+
+const signOptions = { expiresIn:  "1h", algorithm:  "RS256" };
+const token = jwt.sign(payload, privateKey, signOptions);
+
+console.log("Token: " + token);

securing_sipjs_with_ephemeral_agents/work/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "tokens",
+  "version": "1.0.0",
+  "description": "",
+  "main": "create-jwt.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC",
+  "dependencies": {
+    "jsonwebtoken": "^9.0.2"
+  }
+}

securing_sipjs_with_ephemeral_agents/work/private.key

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

securing_sipjs_with_ephemeral_agents/work/public.key

@@ -0,0 +1,14 @@
+-----BEGIN PUBLIC KEY-----
+MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsx00ato/b6svauSZRbBd
+ufBmnVC+UYS9lAXr9dFZwqTGmA/bRKfCvqPsfDC2ww+wfNlD8sbL1EvShMtSsbr+
+yJpgIFJgTtEHTeo6Cw2uPDutCn6E8JDdEueFngS+adv9i9lH2cnalG8vSyQ49/b3
+h1nzBM/F7r4BUxY/bxoz3Ye5FnSkV7ivRJdVSb3iamuLaDFn/qZS3DV8hiGznGAl
+h85nsWW/IDi0c6Nhvvwx0zNeLIi7eJujuXjfxzGY/BprZFlp8Jn+Hh8rg3QMVFtd
+B04bMCfXE4V2krtVh9tCPzsLYbpxcMd1wdpXIpgDjIBNif0wLtc9WUZHU0Hzox7s
+qKnw6fQUWej7b3SS/DXO6uA7wpo80JSVkbrDSGrKY9MLqu3zr9EzHsz/VB49QrIB
+k3mlFDkA36QHjJaqnfqa4Ao14tEiMDFftEb63gTP92CuATWElKY5GANQNL8Sol4s
+27xW/A+5OgVAVbyWzOmk3x4VKAHkUtvbP8in2daPpgEWdxlerF8dXBtMmt593bRA
+sarqcUhCFLtxFFA6BKrxg+lqnOThP+IHB7T9gGncUTCkuBg2sDVhkxmzSWFM+dfm
+kTcyY1my4frt7ew8luMiEgi3HOZd0zvXFugFvdQuJv83EkePrV9iJMZwXeeY/a15
+45JzSoNCu1UmMmWIQVSTiJcCAwEAAQ==
+-----END PUBLIC KEY-----