agora-token 2.0.0

package/src/RtcTokenBuilder.js

@@ -0,0 +1,75 @@
+const AccessToken = require('../src/AccessToken').AccessToken
+const Priviledges = require('../src/AccessToken').priviledges
+
+const Role = {
+    // DEPRECATED. Role::ATTENDEE has the same privileges as Role.PUBLISHER.
+    ATTENDEE: 0,
+
+    // RECOMMENDED. Use this role for a voice/video call or a live broadcast, if your scenario does not require authentication for [Hosting-in](https://docs.agora.io/en/Agora%20Platform/terms?platform=All%20Platforms#hosting-in).
+    PUBLISHER: 1,
+
+    /* Only use this role if your scenario require authentication for [Hosting-in](https://docs.agora.io/en/Agora%20Platform/terms?platform=All%20Platforms#hosting-in).
+     * @note In order for this role to take effect, please contact our support team to enable authentication for Hosting-in for you. Otherwise, Role.SUBSCRIBER still has the same privileges as Role.PUBLISHER.
+     */
+    SUBSCRIBER: 2,
+
+    // DEPRECATED. Role.ADMIN has the same privileges as Role.PUBLISHER.
+    ADMIN: 101
+}
+
+class RtcTokenBuilder {
+
+   /**
+    * Builds an RTC token using an Integer uid.
+    * @param {*} appID  The App ID issued to you by Agora.
+    * @param {*} appCertificate Certificate of the application that you registered in the Agora Dashboard.
+    * @param {*} channelName The unique channel name for the AgoraRTC session in the string format. The string length must be less than 64 bytes. Supported character scopes are:
+    * - The 26 lowercase English letters: a to z.
+    * - The 26 uppercase English letters: A to Z.
+    * - The 10 digits: 0 to 9.
+    * - The space.
+    * - "!", "#", "$", "%", "&", "(", ")", "+", "-", ":", ";", "<", "=", ".", ">", "?", "@", "[", "]", "^", "_", " {", "}", "|", "~", ",".
+    * @param {*} uid User ID. A 32-bit unsigned integer with a value ranging from 1 to (2^32-1).
+    * @param {*} role See #userRole.
+    * - Role.PUBLISHER; RECOMMENDED. Use this role for a voice/video call or a live broadcast.
+    * - Role.SUBSCRIBER: ONLY use this role if your live-broadcast scenario requires authentication for [Hosting-in](https://docs.agora.io/en/Agora%20Platform/terms?platform=All%20Platforms#hosting-in). In order for this role to take effect, please contact our support team to enable authentication for Hosting-in for you. Otherwise, Role_Subscriber still has the same privileges as Role_Publisher.
+    * @param {*} privilegeExpiredTs  represented by the number of seconds elapsed since 1/1/1970. If, for example, you want to access the Agora Service within 10 minutes after the token is generated, set expireTimestamp as the current timestamp + 600 (seconds).
+    * @return The new Token.
+    */
+    static buildTokenWithUid(appID, appCertificate, channelName, uid, role, privilegeExpiredTs) {
+        return this.buildTokenWithAccount(appID, appCertificate, channelName, uid, role, privilegeExpiredTs)
+    }
+
+   /**
+    * Builds an RTC token using an Integer uid.
+    * @param {*} appID  The App ID issued to you by Agora.
+    * @param {*} appCertificate Certificate of the application that you registered in the Agora Dashboard.
+    * @param {*} channelName The unique channel name for the AgoraRTC session in the string format. The string length must be less than 64 bytes. Supported character scopes are:
+    * - The 26 lowercase English letters: a to z.
+    * - The 26 uppercase English letters: A to Z.
+    * - The 10 digits: 0 to 9.
+    * - The space.
+    * - "!", "#", "$", "%", "&", "(", ")", "+", "-", ":", ";", "<", "=", ".", ">", "?", "@", "[", "]", "^", "_", " {", "}", "|", "~", ",".
+    * @param {*} account The user account.
+    * @param {*} role See #userRole.
+    * - Role.PUBLISHER; RECOMMENDED. Use this role for a voice/video call or a live broadcast.
+    * - Role.SUBSCRIBER: ONLY use this role if your live-broadcast scenario requires authentication for [Hosting-in](https://docs.agora.io/en/Agora%20Platform/terms?platform=All%20Platforms#hosting-in). In order for this role to take effect, please contact our support team to enable authentication for Hosting-in for you. Otherwise, Role_Subscriber still has the same privileges as Role_Publisher.
+    * @param {*} privilegeExpiredTs  represented by the number of seconds elapsed since 1/1/1970. If, for example, you want to access the Agora Service within 10 minutes after the token is generated, set expireTimestamp as the current timestamp + 600 (seconds).
+    * @return The new Token.
+    */
+    static buildTokenWithAccount(appID, appCertificate, channelName, account, role, privilegeExpiredTs) {
+        this.key = new AccessToken(appID, appCertificate, channelName, account)
+        this.key.addPriviledge(Priviledges.kJoinChannel, privilegeExpiredTs)
+        if (role == Role.ATTENDEE ||
+            role == Role.PUBLISHER ||
+            role == Role.ADMIN) {
+            this.key.addPriviledge(Priviledges.kPublishAudioStream, privilegeExpiredTs)
+            this.key.addPriviledge(Priviledges.kPublishVideoStream, privilegeExpiredTs)
+            this.key.addPriviledge(Priviledges.kPublishDataStream, privilegeExpiredTs)
+        }
+        return this.key.build();
+    }
+}
+
+module.exports.RtcTokenBuilder = RtcTokenBuilder;
+module.exports.Role = Role;

package/src/RtcTokenBuilder2.js

@@ -0,0 +1,197 @@
+const AccessToken = require('../src/AccessToken2').AccessToken2
+const ServiceRtc = require('../src/AccessToken2').ServiceRtc
+
+const Role = {
+    // for live broadcaster
+    PUBLISHER: 1,
+
+    // default, for live audience
+    SUBSCRIBER: 2,
+}
+
+class RtcTokenBuilder {
+    /**
+     * Builds an RTC token using an Integer uid.
+     * @param {*} appId  The App ID issued to you by Agora.
+     * @param {*} appCertificate Certificate of the application that you registered in the Agora Dashboard.
+     * @param {*} channelName The unique channel name for the AgoraRTC session in the string format. The string length must be less than 64 bytes. Supported character scopes are:
+     * - The 26 lowercase English letters: a to z.
+     * - The 26 uppercase English letters: A to Z.
+     * - The 10 digits: 0 to 9.
+     * - The space.
+     * - "!", "#", "$", "%", "&", "(", ")", "+", "-", ":", ";", "<", "=", ".", ">", "?", "@", "[", "]", "^", "_", " {", "}", "|", "~", ",".
+     * @param {*} uid User ID. A 32-bit unsigned integer with a value ranging from 1 to (2^32-1).
+     * @param {*} role See #userRole.
+     * - Role.PUBLISHER; RECOMMENDED. Use this role for a voice/video call or a live broadcast.
+     * - Role.SUBSCRIBER: ONLY use this role if your live-broadcast scenario requires authentication for [Hosting-in](https://docs.agora.io/en/Agora%20Platform/terms?platform=All%20Platforms#hosting-in). In order for this role to take effect, please contact our support team to enable authentication for Hosting-in for you. Otherwise, Role_Subscriber still has the same privileges as Role_Publisher.
+     * @param {*} token_expire epresented by the number of seconds elapsed since now. If, for example, you want to access the Agora Service within 10 minutes after the token is generated, set token_expire as 600(seconds)
+     * @param {*} privilege_expire represented by the number of seconds elapsed since now. If, for example, you want to enable your privilege for 10 minutes, set privilege_expire as 600(seconds).     * @return The new Token.
+     */
+    static buildTokenWithUid(appId, appCertificate, channelName, uid, role,  token_expire, privilege_expire = 0) {
+        return this.buildTokenWithUserAccount(appId, appCertificate, channelName, uid, role, token_expire, privilege_expire)
+    }
+
+    /**
+     * Builds an RTC token using an Integer uid.
+     * @param {*} appId  The App ID issued to you by Agora.
+     * @param {*} appCertificate Certificate of the application that you registered in the Agora Dashboard.
+     * @param {*} channelName The unique channel name for the AgoraRTC session in the string format. The string length must be less than 64 bytes. Supported character scopes are:
+     * - The 26 lowercase English letters: a to z.
+     * - The 26 uppercase English letters: A to Z.
+     * - The 10 digits: 0 to 9.
+     * - The space.
+     * - "!", "#", "$", "%", "&", "(", ")", "+", "-", ":", ";", "<", "=", ".", ">", "?", "@", "[", "]", "^", "_", " {", "}", "|", "~", ",".
+     * @param {*} account The user account.
+     * @param {*} role See #userRole.
+     * - Role.PUBLISHER; RECOMMENDED. Use this role for a voice/video call or a live broadcast.
+     * - Role.SUBSCRIBER: ONLY use this role if your live-broadcast scenario requires authentication for [Hosting-in](https://docs.agora.io/en/Agora%20Platform/terms?platform=All%20Platforms#hosting-in). In order for this role to take effect, please contact our support team to enable authentication for Hosting-in for you. Otherwise, Role_Subscriber still has the same privileges as Role_Publisher.
+     * @param {*} token_expire epresented by the number of seconds elapsed since now. If, for example, you want to access the Agora Service within 10 minutes after the token is generated, set token_expire as 600(seconds)
+     * @param {*} privilege_expire represented by the number of seconds elapsed since now. If, for example, you want to enable your privilege for 10 minutes, set privilege_expire as 600(seconds).
+     * @return The new Token.
+     */
+    static buildTokenWithUserAccount(appId, appCertificate, channelName, account, role, token_expire, privilege_expire = 0) {
+        let token = new AccessToken(appId, appCertificate, 0, token_expire)
+
+        let serviceRtc = new ServiceRtc(channelName, account)
+        serviceRtc.add_privilege(ServiceRtc.kPrivilegeJoinChannel, privilege_expire)
+        if (role == Role.PUBLISHER) {
+            serviceRtc.add_privilege(ServiceRtc.kPrivilegePublishAudioStream, privilege_expire)
+            serviceRtc.add_privilege(ServiceRtc.kPrivilegePublishVideoStream, privilege_expire)
+            serviceRtc.add_privilege(ServiceRtc.kPrivilegePublishDataStream, privilege_expire)
+        }
+        token.add_service(serviceRtc)
+
+        return token.build()
+    }
+
+    /**
+     * Generates an RTC token with the specified privilege.
+     *
+     * This method supports generating a token with the following privileges:
+     * - Joining an RTC channel.
+     * - Publishing audio in an RTC channel.
+     * - Publishing video in an RTC channel.
+     * - Publishing data streams in an RTC channel.
+     *
+     * The privileges for publishing audio, video, and data streams in an RTC channel apply only if you have
+     * enabled co-host authentication.
+     *
+     * A user can have multiple privileges. Each privilege is valid for a maximum of 24 hours.
+     * The SDK triggers the onTokenPrivilegeWillExpire and onRequestToken callbacks when the token is about to expire
+     * or has expired. The callbacks do not report the specific privilege affected, and you need to maintain
+     * the respective timestamp for each privilege in your app logic. After receiving the callback, you need
+     * to generate a new token, and then call renewToken to pass the new token to the SDK, or call joinChannel to re-join
+     * the channel.
+     *
+     * @note
+     * Agora recommends setting a reasonable timestamp for each privilege according to your scenario.
+     * Suppose the expiration timestamp for joining the channel is set earlier than that for publishing audio.
+     * When the token for joining the channel expires, the user is immediately kicked off the RTC channel
+     * and cannot publish any audio stream, even though the timestamp for publishing audio has not expired.
+     *
+     * @param appId The App ID of your Agora project.
+     * @param appCertificate The App Certificate of your Agora project.
+     * @param channelName The unique channel name for the Agora RTC session in string format. The string length must be less than 64 bytes. The channel name may contain the following characters:
+     * - All lowercase English letters: a to z.
+     * - All uppercase English letters: A to Z.
+     * - All numeric characters: 0 to 9.
+     * - The space character.
+     * - "!", "#", "$", "%", "&", "(", ")", "+", "-", ":", ";", "<", "=", ".", ">", "?", "@", "[", "]", "^", "_", " {", "}", "|", "~", ",".
+     * @param uid The user ID. A 32-bit unsigned integer with a value range from 1 to (2^32 - 1). It must be unique. Set uid as 0, if you do not want to authenticate the user ID, that is, any uid from the app client can join the channel.
+     * @param tokenExpire represented by the number of seconds elapsed since now. If, for example, you want to access the
+     * Agora Service within 10 minutes after the token is generated, set token_expire as 600(seconds).
+     * @param joinChannelPrivilegeExpire The Unix timestamp when the privilege for joining the channel expires, represented
+     * by the sum of the current timestamp plus the valid time period of the token. For example, if you set joinChannelPrivilegeExpire as the
+     * current timestamp plus 600 seconds, the token expires in 10 minutes.
+     * @param pubAudioPrivilegeExpire The Unix timestamp when the privilege for publishing audio expires, represented
+     * by the sum of the current timestamp plus the valid time period of the token. For example, if you set pubAudioPrivilegeExpire as the
+     * current timestamp plus 600 seconds, the token expires in 10 minutes. If you do not want to enable this privilege,
+     * set pubAudioPrivilegeExpire as the current Unix timestamp.
+     * @param pubVideoPrivilegeExpire The Unix timestamp when the privilege for publishing video expires, represented
+     * by the sum of the current timestamp plus the valid time period of the token. For example, if you set pubVideoPrivilegeExpire as the
+     * current timestamp plus 600 seconds, the token expires in 10 minutes. If you do not want to enable this privilege,
+     * set pubVideoPrivilegeExpire as the current Unix timestamp.
+     * @param pubDataStreamPrivilegeExpire The Unix timestamp when the privilege for publishing data streams expires, represented
+     * by the sum of the current timestamp plus the valid time period of the token. For example, if you set pubDataStreamPrivilegeExpire as the
+     * current timestamp plus 600 seconds, the token expires in 10 minutes. If you do not want to enable this privilege,
+     * set pubDataStreamPrivilegeExpire as the current Unix timestamp.
+     * @return The new Token
+     */
+    static buildTokenWithUidAndPrivilege(appId, appCertificate, channelName, uid,
+                                         tokenExpire, joinChannelPrivilegeExpire, pubAudioPrivilegeExpire,
+                                         pubVideoPrivilegeExpire, pubDataStreamPrivilegeExpire) {
+        return this.BuildTokenWithUserAccountAndPrivilege(appId, appCertificate, channelName, uid,
+            tokenExpire, joinChannelPrivilegeExpire, pubAudioPrivilegeExpire, pubVideoPrivilegeExpire, pubDataStreamPrivilegeExpire)
+    }
+
+    /**
+     * Generates an RTC token with the specified privilege.
+     *
+     * This method supports generating a token with the following privileges:
+     * - Joining an RTC channel.
+     * - Publishing audio in an RTC channel.
+     * - Publishing video in an RTC channel.
+     * - Publishing data streams in an RTC channel.
+     *
+     * The privileges for publishing audio, video, and data streams in an RTC channel apply only if you have
+     * enabled co-host authentication.
+     *
+     * A user can have multiple privileges. Each privilege is valid for a maximum of 24 hours.
+     * The SDK triggers the onTokenPrivilegeWillExpire and onRequestToken callbacks when the token is about to expire
+     * or has expired. The callbacks do not report the specific privilege affected, and you need to maintain
+     * the respective timestamp for each privilege in your app logic. After receiving the callback, you need
+     * to generate a new token, and then call renewToken to pass the new token to the SDK, or call joinChannel to re-join
+     * the channel.
+     *
+     * @note
+     * Agora recommends setting a reasonable timestamp for each privilege according to your scenario.
+     * Suppose the expiration timestamp for joining the channel is set earlier than that for publishing audio.
+     * When the token for joining the channel expires, the user is immediately kicked off the RTC channel
+     * and cannot publish any audio stream, even though the timestamp for publishing audio has not expired.
+     *
+     * @param appId The App ID of your Agora project.
+     * @param appCertificate The App Certificate of your Agora project.
+     * @param channelName The unique channel name for the Agora RTC session in string format. The string length must be less than 64 bytes. The channel name may contain the following characters:
+     * - All lowercase English letters: a to z.
+     * - All uppercase English letters: A to Z.
+     * - All numeric characters: 0 to 9.
+     * - The space character.
+     * - "!", "#", "$", "%", "&", "(", ")", "+", "-", ":", ";", "<", "=", ".", ">", "?", "@", "[", "]", "^", "_", " {", "}", "|", "~", ",".
+     * @param userAccount The user account.
+     * @param tokenExpire represented by the number of seconds elapsed since now. If, for example, you want to access the
+     * Agora Service within 10 minutes after the token is generated, set token_expire as 600(seconds).
+     * @param joinChannelPrivilegeExpire The Unix timestamp when the privilege for joining the channel expires, represented
+     * by the sum of the current timestamp plus the valid time period of the token. For example, if you set joinChannelPrivilegeExpire as the
+     * current timestamp plus 600 seconds, the token expires in 10 minutes.
+     * @param pubAudioPrivilegeExpire The Unix timestamp when the privilege for publishing audio expires, represented
+     * by the sum of the current timestamp plus the valid time period of the token. For example, if you set pubAudioPrivilegeExpire as the
+     * current timestamp plus 600 seconds, the token expires in 10 minutes. If you do not want to enable this privilege,
+     * set pubAudioPrivilegeExpire as the current Unix timestamp.
+     * @param pubVideoPrivilegeExpire The Unix timestamp when the privilege for publishing video expires, represented
+     * by the sum of the current timestamp plus the valid time period of the token. For example, if you set pubVideoPrivilegeExpire as the
+     * current timestamp plus 600 seconds, the token expires in 10 minutes. If you do not want to enable this privilege,
+     * set pubVideoPrivilegeExpire as the current Unix timestamp.
+     * @param pubDataStreamPrivilegeExpire The Unix timestamp when the privilege for publishing data streams expires, represented
+     * by the sum of the current timestamp plus the valid time period of the token. For example, if you set pubDataStreamPrivilegeExpire as the
+     * current timestamp plus 600 seconds, the token expires in 10 minutes. If you do not want to enable this privilege,
+     * set pubDataStreamPrivilegeExpire as the current Unix timestamp.
+     * @return The new Token.
+     */
+    static BuildTokenWithUserAccountAndPrivilege(appId, appCertificate, channelName, account,
+                                                 tokenExpire, joinChannelPrivilegeExpire, pubAudioPrivilegeExpire,
+                                                 pubVideoPrivilegeExpire, pubDataStreamPrivilegeExpire) {
+        let token = new AccessToken(appId, appCertificate, 0, tokenExpire)
+
+        let serviceRtc = new ServiceRtc(channelName, account)
+        serviceRtc.add_privilege(ServiceRtc.kPrivilegeJoinChannel, joinChannelPrivilegeExpire)
+        serviceRtc.add_privilege(ServiceRtc.kPrivilegePublishAudioStream, pubAudioPrivilegeExpire)
+        serviceRtc.add_privilege(ServiceRtc.kPrivilegePublishVideoStream, pubVideoPrivilegeExpire)
+        serviceRtc.add_privilege(ServiceRtc.kPrivilegePublishDataStream, pubDataStreamPrivilegeExpire)
+        token.add_service(serviceRtc)
+
+        return token.build()
+    }
+}
+
+module.exports.RtcTokenBuilder = RtcTokenBuilder
+module.exports.Role = Role

package/src/RtmTokenBuilder.js

@@ -0,0 +1,31 @@
+const AccessToken = require("../src/AccessToken").AccessToken
+const Priviledges = require('../src/AccessToken').priviledges
+
+const Role = {
+  Rtm_User: 1
+}
+class RtmTokenBuilder {
+
+  /**
+   * @param {*} appID: The App ID issued to you by Agora. Apply for a new App ID from 
+   *       Agora Dashboard if it is missing from your kit. See Get an App ID.
+   * @param {*} appCertificate:	Certificate of the application that you registered in 
+   *                 the Agora Dashboard. See Get an App Certificate.
+   * @param {*} account: The user account. 
+   * @param {*} role : Role_Publisher = 1: A broadcaster (host) in a live-broadcast profile.
+   *      Role_Subscriber = 2: (Default) A audience in a live-broadcast profile.
+   * @param {*} privilegeExpiredTs : represented by the number of seconds elapsed since 
+   *                   1/1/1970. If, for example, you want to access the
+   *                   Agora Service within 10 minutes after the token is 
+   *                   generated, set expireTimestamp as the current 
+   * @return token
+   */
+  static buildToken (appID, appCertificate, account, role, privilegeExpiredTs) {
+    const key = new AccessToken(appID, appCertificate, account, "")
+    key.addPriviledge(Priviledges.kRtmLogin, privilegeExpiredTs)
+    return key.build()
+  }
+}
+
+module.exports.RtmTokenBuilder = RtmTokenBuilder
+module.exports.Role = Role

package/src/RtmTokenBuilder2.js

@@ -0,0 +1,28 @@
+const AccessToken = require("../src/AccessToken2").AccessToken2;
+const ServiceRtm = require("../src/AccessToken2").ServiceRtm;
+
+class RtmTokenBuilder {
+    /**
+     * Build the RTM token.
+     *
+     * @param appId The App ID issued to you by Agora. Apply for a new App ID from
+     * Agora Dashboard if it is missing from your kit. See Get an App ID.
+     * @param appCertificate Certificate of the application that you registered in
+     * the Agora Dashboard. See Get an App Certificate.
+     * @param userId The user's account, max length is 64 Bytes.
+     * @param expire represented by the number of seconds elapsed since now. If, for example, you want to access the
+     * Agora Service within 10 minutes after the token is generated, set expireTimestamp as 600(seconds).
+     * @return The RTM token.
+     */
+    static buildToken(appId, appCertificate, userId, expire) {
+        let token = new AccessToken(appId, appCertificate, null, expire);
+
+        let serviceRtm = new ServiceRtm(userId);
+        serviceRtm.add_privilege(ServiceRtm.kPrivilegeLogin, expire);
+        token.add_service(serviceRtm);
+
+        return token.build();
+    }
+}
+
+module.exports.RtmTokenBuilder = RtmTokenBuilder;

package/src/SignalingToken.js

@@ -0,0 +1,29 @@
+const md5 = require("md5");
+
+var SignalingToken = {}
+
+SignalingToken.get = function(appid, appcertificate, account, validTimeInSeconds){
+    var expiredTime = parseInt(new Date().getTime() / 1000)+ validTimeInSeconds;
+    var token_items = [];
+
+    //append SDK VERSION
+    token_items.push("1");
+
+    //append appid
+    token_items.push(appid);
+
+    //expired time
+    token_items.push(expiredTime);
+
+    //md5 account + appid + appcertificate + expiredtime
+    token_items.push(md5(account + appid + appcertificate + expiredTime));
+
+    return token_items.join(":");
+}
+
+//convenience function to get token valid within 1 day
+SignalingToken.get1DayToken = function(appid, appcertificate, account){
+    return SignalingToken.get(appid, appcertificate, account, 3600 * 24);
+}
+
+module.exports = SignalingToken;

package/test/AccessToken2Test.js

@@ -0,0 +1,110 @@
+/**
+ * run this test with command:
+ * nodeunit AccessTokenTest.js
+ * see https://github.com/caolan/nodeunit
+ */
+ const {AccessToken2, ServiceRtc, ServiceRtm, ServiceChat} = require('../src/AccessToken2')
+ 
+ var appID = "970CA35de60c44645bbae8a215061b33";
+ var appCertificate = "5CFd2fd1755d40ecb72977518be15d3b";
+ var channel = "7d72365eb983485397e3e3f9d460bdda";
+ var uid = 2882341273;
+ var uidStr = "2882341273"
+ var ts = 1111111;
+ var expire = 600;
+ var salt = 1;
+ var user_id = "test_user"
+ 
+ exports.AccessToken_Test = function (test) {
+   var expected = "007eJxTYBBbsMMnKq7p9Hf/HcIX5kce9b518kCiQgSr5Zrp4X1Tu6UUGCzNDZwdjU1TUs0Mkk1MzExMk5ISUy0SjQxNDcwMk4yN3b8IMEQwMTAwMoAwBIL4CgzmKeZGxmamqUmWFsYmFqbGluapxqnGaZYpJmYGSSkpiVwMRhYWRsYmhkbmxgDCaiTj";
+ 
+   var token = new AccessToken2(appID, appCertificate, ts, expire);
+   token.salt = salt;
+   let rtc_service = new ServiceRtc(channel, uid)
+   rtc_service.add_privilege(ServiceRtc.kPrivilegeJoinChannel, expire)
+   token.add_service(rtc_service)
+ 
+   var actual = token.build();
+   test.equal(expected, actual);
+   test.done();
+ };
+ 
+ // test uid = 0
+ exports.AccessToken_Test2 = function (test) {
+  var expected = "007eJxTYLhzZP08Lxa1Pg57+TcXb/3cZ3wi4V6kbpbOog0G2dOYk20UGCzNDZwdjU1TUs0Mkk1MzExMk5ISUy0SjQxNDcwMk4yN3b8IMEQwMTAwMoAwBIL4CgzmKeZGxmamqUmWFsYmFqbGluapxqnGaZYpJmYGSSkpiQwMADacImo=";
+ 
+  var token = new AccessToken2(appID, appCertificate, ts, expire);
+  token.salt = salt;
+  let rtc_service = new ServiceRtc(channel, 0)
+  rtc_service.add_privilege(ServiceRtc.kPrivilegeJoinChannel, expire)
+  token.add_service(rtc_service)
+
+  var actual = token.build();
+  test.equal(expected, actual);
+  test.done();
+ };
+
+ // test service rtc account
+ exports.AccessToken_Test3 = function (test) {
+  var expected = "007eJxTYBBbsMMnKq7p9Hf/HcIX5kce9b518kCiQgSr5Zrp4X1Tu6UUGCzNDZwdjU1TUs0Mkk1MzExMk5ISUy0SjQxNDcwMk4yN3b8IMEQwMTAwMoAwBIL4CgzmKeZGxmamqUmWFsYmFqbGluapxqnGaZYpJmYGSSkpiVwMRhYWRsYmhkbmxgDCaiTj";
+ 
+  var token = new AccessToken2(appID, appCertificate, ts, expire);
+  token.salt = salt;
+  let rtc_service = new ServiceRtc(channel, `${uid}`)
+  rtc_service.add_privilege(ServiceRtc.kPrivilegeJoinChannel, expire)
+  token.add_service(rtc_service)
+
+  var actual = token.build();
+  test.equal(expected, actual);
+  test.done();
+ };
+
+ // test service multi service
+ exports.AccessToken_Test4 = function (test) {
+  var expected = "007eJxTYOAQsrQ5s3TfH+1tvy8zZZ46EpCc0V43JXdGd2jS8porKo4KDJbmBs6OxqYpqWYGySYmZiamSUmJqRaJRoamBmaGScbG7l8EGCKYGBgYGRgYmIAkCxCD+ExgkhlMsoBJBQbzFHMjYzPT1CRLC2MTC1NjS/NU41TjNMsUEzODpJSURC4GIwsLI2MTQyNzY5BZEJM4GUpSi0viS4tTiwAipyp4";
+ 
+  var token = new AccessToken2(appID, appCertificate, ts, expire);
+  token.salt = salt;
+  let rtc_service = new ServiceRtc(channel, uid)
+  rtc_service.add_privilege(ServiceRtc.kPrivilegeJoinChannel, expire)
+  rtc_service.add_privilege(ServiceRtc.kPrivilegePublishAudioStream, expire)
+  rtc_service.add_privilege(ServiceRtc.kPrivilegePublishVideoStream, expire)
+  rtc_service.add_privilege(ServiceRtc.kPrivilegePublishDataStream, expire)
+  token.add_service(rtc_service)
+
+  let rtm_service = new ServiceRtm(user_id)
+  rtm_service.add_privilege(ServiceRtm.kPrivilegeLogin, expire)
+  token.add_service(rtm_service)
+
+  var actual = token.build();
+  test.equal(expected, actual);
+  test.done();
+ };
+
+ exports.AccessToken_Test_buildChatUserToken = function (test) {
+  var expected = "007eJxTYNAIsnbS3v/A5t2TC6feR15r+6cq8bqAvfaW+tk/Vzz+p6xTYLA0N3B2NDZNSTUzSDYxMTMxTUpKTLVINDI0NTAzTDI2dv8iwBDBxMDAyADCrEDMCOZzMRhZWBgZmxgamRsDAB+lHrg="
+
+  var token = new AccessToken2(appID, appCertificate, ts, expire)
+  token.salt = salt
+  let chat_service = new ServiceChat(uidStr)
+  chat_service.add_privilege(ServiceChat.kPrivilegeUser, expire)
+  token.add_service(chat_service)
+
+  var actual = token.build()
+  test.equal(expected, actual)
+  test.done()
+ }
+
+ exports.AccessToken_Test_buildChatAppToken = function (test) {
+  var expected = "007eJxTYNDNaz3snC8huEfHWdz6s98qltq4zqy9fl99Uh0FDvy6F6DAYGlu4OxobJqSamaQbGJiZmKalJSYapFoZGhqYGaYZGzs/kWAIYKJgYGRAYRZgZgJzGdgAACt8hhr"
+
+  var token = new AccessToken2(appID, appCertificate, ts, expire)
+  token.salt = salt
+  let chat_service = new ServiceChat()
+  chat_service.add_privilege(ServiceChat.kPrivilegeApp, expire)
+  token.add_service(chat_service)
+
+  var actual = token.build()
+  test.equal(expected, actual)
+  test.done()
+ }

package/test/AccessTokenTest.js

@@ -0,0 +1,77 @@
+/**
+ * run this test with command:
+ * nodeunit AccessTokenTest.js
+ * see https://github.com/caolan/nodeunit
+ */
+const AccessToken = require("../src/AccessToken").AccessToken;
+const Priviledges = require("../src/AccessToken").priviledges;
+
+const appID = "970CA35de60c44645bbae8a215061b33";
+const appCertificate = "5CFd2fd1755d40ecb72977518be15d3b";
+const channel = "7d72365eb983485397e3e3f9d460bdda";
+const uid = 2882341273;
+const salt = 1;
+const ts = 1111111;
+const expireTimestamp = 1446455471;
+
+exports.AccessToken_Test = function (test) {
+    const expected = "006970CA35de60c44645bbae8a215061b33IACV0fZUBw+72cVoL9eyGGh3Q6Poi8bgjwVLnyKSJyOXR7dIfRBXoFHlEAABAAAAR/QQAAEAAQCvKDdW";
+
+    const key = new AccessToken(appID, appCertificate, channel, uid);
+    key.salt = salt;
+    key.ts = ts;
+    key.messages[Priviledges.kJoinChannel] = expireTimestamp;
+
+    const actual = key.build();
+    test.equal(expected, actual);
+    test.done();
+};
+
+// test uid = 0
+exports.AccessToken_Test2 = function (test) {
+    const expected = "006970CA35de60c44645bbae8a215061b33IACw1o7htY6ISdNRtku3p9tjTPi0jCKf9t49UHJhzCmL6bdIfRAAAAAAEAABAAAAR/QQAAEAAQCvKDdW";
+
+    const uid_zero = 0;
+    const key = new AccessToken(appID, appCertificate, channel, uid_zero);
+    key.salt = salt;
+    key.ts = ts;
+    key.messages[Priviledges.kJoinChannel] = expireTimestamp;
+
+    const actual = key.build();
+    test.equal(expected, actual);
+    test.done();
+};
+
+const RtcRole = require("../src/RtcTokenBuilder").Role;
+
+exports.RtcTokenBuilder_Test = function (test) {
+    const appID = "970CA35de60c44645bbae8a215061b33";
+    const certificate = "5CFd2fd1755d40ecb72977518be15d3b";
+    const expected =
+        "006970CA35de60c44645bbae8a215061b33IACMv3I+fsRSejxy6luEwzA/1t/zbEHWfJCJ5m8ssFP/fLdIfRBXoFHlIgABAAAAR/QQAAQAAQCvKDdWAgCvKDdWAwCvKDdWBACvKDdW";
+
+    const channelName = "7d72365eb983485397e3e3f9d460bdda";
+
+    const uid = 2882341273;
+
+    const salt = 1;
+
+    const ts = 1111111;
+
+    const privilegeExpiredsTs = 1446455471;
+
+    const role = RtcRole.PUBLISHER;
+
+    const key = new AccessToken(appID, certificate, channelName, uid);
+    key.addPriviledge(Priviledges.kJoinChannel, privilegeExpiredsTs);
+    key.salt = salt;
+    key.ts = ts;
+    if (role == RtcRole.PUBLISHER || role == RtcRole.SUBSCRIBER || role == RtcRole.ADMIN) {
+        key.addPriviledge(Priviledges.kPublishAudioStream, privilegeExpiredsTs);
+        key.addPriviledge(Priviledges.kPublishVideoStream, privilegeExpiredsTs);
+        key.addPriviledge(Priviledges.kPublishDataStream, privilegeExpiredsTs);
+    }
+    const actual = key.build();
+    test.equal(expected, actual);
+    test.done();
+};

package/test/DynamicKeyTest.js

@@ -0,0 +1,47 @@
+/**
+ * run this test with command:
+ * nodeunit DynamicKeyTest.js
+ * see https://github.com/caolan/nodeunit
+ */
+var DynamicKey5 = require('../src/DynamicKey5');
+
+var appID  = "970ca35de60c44645bbae8a215061b33";
+var appCertificate     = "5cfd2fd1755d40ecb72977518be15d3b";
+var channel = "7d72365eb983485397e3e3f9d460bdda";
+var ts = 1446455472;
+var r = 58964981;
+//var uid=999;
+var uid=2882341273;
+var expiredTs=1446455471;
+
+exports.PublicSharingKey5_Test = function(test) {
+  var expected = "005AwAoADc0QTk5RTVEQjI4MDk0NUI0NzUwNTk0MUFDMjM4MDU2NzIwREY3QjAQAJcMo13mDERkW7roohUGGzOwKDdW9buDA68oN1YAAA==";
+  var actual = DynamicKey5.generatePublicSharingKey(appID, appCertificate, channel, ts, r, uid, expiredTs);
+  test.equal(expected, actual);
+  test.done();
+};
+
+exports.RecordingKey5_Test = function(test) {
+  var expected = "005AgAoADkyOUM5RTQ2MTg3QTAyMkJBQUIyNkI3QkYwMTg0MzhDNjc1Q0ZFMUEQAJcMo13mDERkW7roohUGGzOwKDdW9buDA68oN1YAAA==";
+  var result = DynamicKey5.generateRecordingKey(appID, appCertificate, channel, ts, r, uid, expiredTs);
+  test.equal(expected, result);
+  test.done();
+};
+
+exports.MediaChannelKey5_Test = function(test) {
+  var expected = "005AQAoAEJERTJDRDdFNkZDNkU0ODYxNkYxQTYwOUVFNTM1M0U5ODNCQjFDNDQQAJcMo13mDERkW7roohUGGzOwKDdW9buDA68oN1YAAA==";
+  var result = DynamicKey5.generateMediaChannelKey(appID, appCertificate, channel, ts, r, uid, expiredTs);
+  test.equal(expected, result);
+  test.done();
+};
+
+exports.InChannelPermission5_Test = function(test) {
+  var noUpload = "005BAAoADgyNEQxNDE4M0FGRDkyOEQ4REFFMUU1OTg5NTg2MzA3MTEyNjRGNzQQAJcMo13mDERkW7roohUGGzOwKDdW9buDA68oN1YBAAEAAQAw";
+  var generatedNoUpload = DynamicKey5.generateInChannelPermissionKey(appID, appCertificate, channel, ts, r, uid, expiredTs, DynamicKey5.noUpload);
+  test.equal(noUpload, generatedNoUpload);
+
+  var audioVideoUpload = "005BAAoADJERDA3QThENTE2NzJGNjQwMzY5NTFBNzE0QkI5NTc0N0Q1QjZGQjMQAJcMo13mDERkW7roohUGGzOwKDdW9buDA68oN1YBAAEAAQAz";
+  var generatedAudioVideoUpload = DynamicKey5.generateInChannelPermissionKey(appID, appCertificate, channel, ts, r, uid, expiredTs, DynamicKey5.audioVideoUpload);
+  test.equal(audioVideoUpload, generatedAudioVideoUpload);
+  test.done();
+};

package/test/EducationTokenBuilderTest.js

@@ -0,0 +1,45 @@
+/**
+ * run this test with command:
+ * nodeunit test/EducationTokenBuilderTest.js
+ * see https://github.com/caolan/nodeunit
+ */
+const EduTokenBuilder = require('../src/EducationTokenBuilder').EducationTokenBuilder
+const {AccessToken2, kEducationServiceType} = require('../src/AccessToken2')
+const appId = "970CA35de60c44645bbae8a215061b33"
+const appCertificate = "5CFd2fd1755d40ecb72977518be15d3b"
+const expire = 600
+const roomUuid = "123";
+const userUuid = "2882341273";
+const role = 1;
+
+ exports.BuildRoomUserToken_Test = function (test) {
+   let accessToken = new AccessToken2('', '', 0, 0)
+   let token = EduTokenBuilder.buildRoomUserToken(appId, appCertificate, roomUuid, userUuid, role, expire)
+   accessToken.from_string(token)
+   test.equal(appId, accessToken.appId)
+    test.equal(expire, accessToken.expire)
+   test.equal(roomUuid, accessToken.services[kEducationServiceType].__room_uuid)
+   test.equal(userUuid, accessToken.services[kEducationServiceType].__user_uuid)
+   test.equal(role, accessToken.services[kEducationServiceType].__role)
+   test.done()
+}
+ 
+ exports.BuildUserToken_Test = function (test) {
+   let accessToken = new AccessToken2('', '', 0, 0)
+   let token = EduTokenBuilder.buildUserToken(appId, appCertificate, userUuid, expire)
+   accessToken.from_string(token)
+
+   test.equal(appId, accessToken.appId)
+   test.equal(expire, accessToken.expire)
+   test.equal(userUuid, accessToken.services[kEducationServiceType].__user_uuid)
+   test.done()
+ }
+ 
+ exports.BuildAppToken_Test = function (test) {
+   let accessToken = new AccessToken2('', '', 0, 0)
+   let token = EduTokenBuilder.buildAppToken(appId, appCertificate, expire)
+   accessToken.from_string(token)
+   test.equal(appId, accessToken.appId)
+   test.equal(expire, accessToken.expire)
+   test.done()
+ }