How to Create or Generate a JWT Token

What is a JWT Token?

JSON Web Token (JWT) is an industry-standard security protocol (RFC 7519) that enables secure information sharing between applications. Think of it as a digital passport that proves who you are and what you're allowed to access.

When you log into an application, JWT tokens act like a secure key card - every time you make a request, the token proves your identity without requiring you to log in again.

How to Generate a JWT Token in Code

A JWT is three base64url-encoded parts joined with dots: a header (the signing algorithm), a payload (your claims, such as the user and expiry), and a signature (proof the token wasn't tampered with). You don't build that string by hand, a library does it for you from a plain object and a secret key.

Node.js

Install jsonwebtoken, then sign a payload with your secret:

const jwt = require('jsonwebtoken');

const payload = { sub: 'user123', name: 'John Doe', moderator: true };
const secret = process.env.JWT_SECRET;

const token = jwt.sign(payload, secret, {
  algorithm: 'HS256',
  expiresIn: '1h'
});

console.log(token);

Python

Install PyJWT, then encode a payload the same way:

import jwt
import datetime

payload = {
    "sub": "user123",
    "name": "John Doe",
    "moderator": True,
    "exp": datetime.datetime.now(datetime.timezone.utc) + datetime.timedelta(hours=1)
}

token = jwt.encode(payload, "your-256-bit-secret", algorithm="HS256")
print(token)

Why Use JWT with Jitsi Meet?

JWT authentication transforms your Jitsi Meet experience by providing:

• Enhanced Security: Prevents unauthorized users from joining your meetings
• Seamless Access: Users join meetings instantly without waiting in lobbies
• No Zoom-bombing: Even if someone has your meeting URL, they can't join without a valid token
• Automated Authentication: No manual username/password entry required

Ready to secure your meetings? Follow these simple steps to create your own JWT token.

Step 1: Locate Your App Credentials

Before generating tokens, you need to find your App ID and App Secret from your Jitsi server configuration.

Step 2: Generate Your JWT Token

For a one-off test token you don't need the code above at all. We'll use the popular JWT.io website for easy token generation.

Configuring the Payload

The payload is the heart of your JWT token. It contains all the important information about the user and meeting permissions.

Sample Payload Configuration

Copy and customize this template with your actual values:

{
  "context": {
    "user": {
      "avatar": "https://example.com/user-avatar.jpg",
      "name": "John Doe",
      "email": "john.doe@company.com"
    }
  },
  "moderator": true,
  "aud": "jitsi",
  "iss": "your_app_id_here",
  "sub": "jitsimeet.yourdomain.com",
  "room": "*",
  "exp": 1753498815
}

Setting Up the Signature

In the "Verify Signature" section on JWT.io, replace the placeholder your-256-bit-secret with your actual App Secret from the configuration file.

Step 3: Test Your JWT Token

Time to see your JWT token in action! Copy the generated token from the "Encoded" section on JWT.io and test it with your Jitsi Meet instance.

https://YOUR_DOMAIN/jwt_test_room?jwt=YOUR_TOKEN

Success Indicators