[Feature Request] Short lived credentials for TURN - cloudflare

[irakhlin]

This feature request is to add a mechanism that would allow short-lived authentication to be used for the TURN server. I would imagine this would need to be extensible for different providers. The specific provider in mind here is cloudflare's current TURN server offering: https://developers.cloudflare.com/realtime/turn/generate-credentials/

There is a very healthy free tier available so it makes a good candidate for testing. Cloudflare does not allow creating long-lived credentials but does offer a very simple rest API endpoint that can be called with your credentials to return a username and credential based on the requested TTL.

I would imagine some backend process maybe using an expiring cache, would need to maintain a good known credential and be tasked with updating it.

Do you think this is a feature you would be willing to add?

[AlexxIT]

Go2rtc has two sources - echo (run some shell script) and expr (run script in expr format).
The script can pull up the actual credenchels and give them as a source.
The script is run each time the stream is not active.