Presence subscribe request fails when using JWT auth

[dabslants]

Presence subscription request don't get to destination for JWT with users.
Is it not possible to handle presence request manually when using JWT auth?

Tried with sql auth users and it works fine. Only face issue when it's JWT users.

[prefiks]

Hello,

I don't think this is the case in general, possibly you have module that blocks that active? I think mod_block_strangers can be configured to do that, do you have it in your config?

[prefiks]

Ok, there may be different reason for that. We perform check for user existence before subscription is routed (possibly only when user is offline?), but with jwt we don't have list of users that are registered (they are managed outside ejabberd), which make that check fail.

[dabslants]

So there's no way out of this.
External auth has methods for this right why not jwt?

[prefiks]

With external auth, you we ask external program for that (there is query in extauth protocol that can answer that), but with jwt there is nothing that can tell us for what users tokens were generated. Probably best way for that would be trying to add database to keep info about users that we already seen, and use that to answer this question, but we don't have that yet.

[mremond]

Related ticket: #3377

Issue would be solved by the same approach: Keep a local store of "known user" that have at least authenticated once on the service.

[Freyskeyd]

Hello,

I've open a PR about this subject and would love to have your input !
The PR is here: #3795