I've been migrating a Twilio app to Agora and I noticed that there is no way to control who can claim to be a host of a channel. What's stopping someone from putting a breakpoint in the line that creates the agora client and masquerading as a host? I would have hoped that the role would be baked into the token as opposed to based on scout's honour.
1 Answers
For anyone how comes across this in the future, I finally discovered an answer. The temp tokens generated on the agora dashboard allow a user to be both host and audience, but when you generate real tokens, you can embed within the token the role of that user:
Related