Defining WebRTC SIP Accounts with JWT Authentication

In addition to traditional username/password and IP-based authentication, CommPeak also supports JSON Web Token (JWT authentication) for your SIP accounts.

📘
NOTE
JWT is a widely adopted open standard that simplifies secure data exchange. Since each token is digitally signed, the data can be verified and trusted, ensuring security and integrity throughout communication. This modern authentication method ensures a more secure and scalable way to manage access.

Configuring JWT authentication

To configure JWT authentication, follow these steps:

Expand VoIP Services

Expand VoIP Services in the left pane.

Open SIP Accounts

Click the SIP Accounts (Trunks) tab.

Edit the account

Click the edit button next to the SIP account for which you want to enable JWT authentication.

Screenshot of the SIP Accounts (Trunks) page — SIP Accounts **(Trunks)** page

Enable JWT authentication

On the Edit SIP Account page, go to the Authentication section and toggle Allow JWT Authentication.

❗️
IMPORTANT
JWT authentication is only available for password-based SIP Accounts.
IP Access Control List (ACL) settings will still be enforced even when JWT is enabled.

Set the signature secret

After enabling the JWT Authentication option, define a JWT signature secret.

You have two choices:

Let the system automatically generate a secure secret with the Generate button — the circular-arrows icon next to the field (hover over it to see the tooltip).
Manually enter your own secret (32 characters long, only letters and numbers allowed).

Screenshot of defining JWT signature secret — Defining JWT signature secret

👍
TIP
Use the Copy button, the copy icon next to the field, to copy the secret to your clipboard.

Save the changes

After copying and saving your JWT signature secret, click the Save Changes button to apply the new settings.

Confirm with your password

Confirm the operation by entering your password and click Save Settings:

Screenshot of the Password Confirmation window — Password Confirmation window

Using SIP Account with JWT authentication

Once JWT Authentication is enabled, you will see a new icon next to your SIP account status on the SIP Accounts page, making it easy to identify accounts with JWT.

Now, you can instantly launch the built-in CommPeak Softphone directly from this page.

Please check this step-by-step guide for precise, actionable instructions on implementing the WebRTC Softphone directly on your website.

Enabling JWT Authentication for a SIP Account

NOTE

Configuring JWT authentication

Expand VoIP Services

Open SIP Accounts

Edit the account

Enable JWT authentication

IMPORTANT

Set the signature secret

TIP

Save the changes

Confirm with your password

Using SIP Account with JWT authentication

What’s Next