🔧(helm) update ASR model name after switch to WhisperX

Correct Automatic Speech Recognition model naming configuration to reflect
the transition from insanely-fast-whisper to WhisperX implementation.

README.md

@@ -16,7 +16,7 @@
 </p>
 
 <p align="center">
-  <a href="https://livekit.io/">LiveKit</a> - <a href="https://go.crisp.chat/chat/embed/?website_id=58ea6697-8eba-4492-bc59-ad6562585041">Chat with us</a> - <a href="https://github.com/orgs/suitenumerique/projects/3/views/2">Roadmap</a> - <a href="https://github.com/suitenumerique/meet/blob/main/CHANGELOG.md">Changelog</a> - <a href="https://github.com/suitenumerique/meet/issues/new?assignees=&labels=bug&template=Bug_report.md">Bug reports</a> 
+  <a href="https://livekit.io/">LiveKit</a> - <a href="https://matrix.to/#/#meet-official:matrix.org">Chat with us</a> - <a href="https://github.com/orgs/suitenumerique/projects/3/views/2">Roadmap</a> - <a href="https://github.com/suitenumerique/meet/blob/main/CHANGELOG.md">Changelog</a> - <a href="https://github.com/suitenumerique/meet/issues/new?assignees=&labels=bug&template=Bug_report.md">Bug reports</a> 
 </p>
 
 <p align="center">

bin/Tiltfile

@@ -49,7 +49,7 @@ clean_old_images('localhost:5001/meet-summary')
 # This is necessary because we need to inject the certificate into our LiveKit container
 local_resource(
     'copy-root-ca',
-    cmd='cp "$(mkcert -CAROOT)/rootCA.pem" ../docker/livekit/rootCA.pem',
+    cmd='cp -f "$(mkcert -CAROOT)/rootCA.pem" ../docker/livekit/rootCA.pem',
     deps=[],  # No dependencies needed
 )
 # Build a custom LiveKit Docker image that includes our root CA certificate

compose.yml

@@ -72,6 +72,8 @@ services:
         - nginx
         - livekit
         - createbuckets
+    extra_hosts:
+      - "127.0.0.1.nip.io:host-gateway"
   
   celery-dev:
     user: ${DOCKER_USER:-1000}

docs/installation.md

@@ -2,7 +2,7 @@
 
 This document is a step-by-step guide that describes how to install Visio on a k8s cluster without AI features.
 
-## Prerequisites
+## Prerequisites for a kubernetes setup
 
 - k8s cluster with an nginx-ingress controller
 - an OIDC provider (if you don't have one, we will provide an example)
@@ -12,14 +12,25 @@ This document is a step-by-step guide that describes how to install Visio on a k
 
 ### Test cluster
 
-If you do not have a test cluster, you can install everything on a local kind cluster. In this case, the simplest way is to use our script **bin/start-kind.sh**.
+If you do not have a kubernetes test cluster, you can install everything on a local kind cluster. In this case, the simplest way is to use our script located in this repo under **bin/start-kind.sh**.
 
-To be able to use the script, you will need to install:
+IMPORTANT: The kind method will only deploy meet as a local instance(127.0.0.1) that can only be accessed from the device where it has been deployed. 
+
+To be able to use the script, you will need to install the following components:
 
 - Docker (https://docs.docker.com/desktop/)
 - Kind (https://kind.sigs.k8s.io/docs/user/quick-start/#installation)
 - Mkcert (https://github.com/FiloSottile/mkcert#installation)
 - Helm (https://helm.sh/docs/intro/quickstart/#install-helm)
+- kubectl (https://kubernetes.io/docs/tasks/tools/)
+
+In order to initiate the local kind installation via **start-kind.sh** do the following:
+1) Make sure administrator/root user context is able to execute mkcert, docker, kind etc. commands or the script might fail
+2) Download the script to the device where the above components are installed
+3) Make the script executable
+4) Run the script with proper permissions (administrator/sudo etc.)
+
+The output of the script will resemble the below example:
 
 ```
 $ ./bin/start-kind.sh
@@ -99,7 +110,7 @@ When your k8s cluster is ready, you can start the deployment. This cluster is sp
 
 Please remember that \*.127.0.0.1.nip.io will always resolve to 127.0.0.1, except in the k8s cluster where we configure CoreDNS to answer with the ingress-nginx service IP.
 
-## Preparation
+## Preparation of components
 
 ### What will you use to authenticate your users ?
 
@@ -111,7 +122,7 @@ If you haven't run the script **bin/start-kind.sh**, you'll need to manually cre
 $ kubectl create namespace meet
 ```
 
-If you have already run the script, you can skip this step and proceed to the next instruction.
+If you have already run the script, you can skip this step and proceed to the next instruction. NOTE: Before you proceed, and is using the kind method, make sure you download this repo examples/ directory and its contents to the location where you will be executing the helm command. Helm will look for "examples/<name>values.yaml" from based on the path it is being executed.
 
 ```
 $ kubectl config set-context --current --namespace=meet
@@ -232,7 +243,7 @@ meet                     <none>   meet.127.0.0.1.nip.io       localhost   80, 44
 meet-admin               <none>   meet.127.0.0.1.nip.io       localhost   80, 443   52m
 ```
 
-You can use Visio on https://meet.127.0.0.1.nip.io. The provisioning user in keycloak is meet/meet.
+You can use Visio on https://meet.127.0.0.1.nip.io from the local device. The provisioning user in keycloak is meet/meet.
 
 ## All options
 
@@ -287,6 +298,7 @@ These are the environmental options available on meet backend.
 | OIDC_OP_AUTHORIZATION_ENDPOINT                  | oidc endpoint for authorization          |                                                                                                                                                               |
 | OIDC_OP_TOKEN_ENDPOINT                          | oidc endpoint for token                  |                                                                                                                                                               |
 | OIDC_OP_USER_ENDPOINT                           | oidc endpoint for user                   |                                                                                                                                                               |
+| OIDC_OP_USER_ENDPOINT_FORMAT                    | oidc endpoint format (AUTO, JWT, JSON)   | AUTO                                                                                                                                                          |
 | OIDC_OP_LOGOUT_ENDPOINT                         | oidc endpoint for logout                 |                                                                                                                                                               |
 | OIDC_AUTH_REQUEST_EXTRA_PARAMS                  | extra parameters for oidc request        |                                                                                                                                                               |
 | OIDC_RP_SCOPES                                  | oidc scopes                              | openid email                                                                                                                                                  |
@@ -301,6 +313,7 @@ These are the environmental options available on meet backend.
 | OIDC_REDIRECT_FIELD_NAME                        | direct field for oidc                    | returnTo                                                                                                                                                      |
 | OIDC_USERINFO_FULLNAME_FIELDS                   | full name claim from OIDC token          | ["given_name", "usual_name"]                                                                                                                                  |
 | OIDC_USERINFO_SHORTNAME_FIELD                   | shortname claim from OIDC token          | given_name                                                                                                                                                    |
+| OIDC_USERINFO_ESSENTIAL_CLAIMS                  | required claims from OIDC token          | []                                                                                                                                                            |
 | LIVEKIT_API_KEY                                 | livekit api key                          |                                                                                                                                                               |
 | LIVEKIT_API_SECRET                              | livekit api secret                       |                                                                                                                                                               |
 | LIVEKIT_API_URL                                 | livekit api url                          |                                                                                                                                                               |
@@ -308,7 +321,6 @@ These are the environmental options available on meet backend.
 | ALLOW_UNREGISTERED_ROOMS                        | Allow usage of unregistered rooms        | true                                                                                                                                                          |
 | RECORDING_ENABLE                                | record meeting option                    | false                                                                                                                                                         |
 | RECORDING_OUTPUT_FOLDER                         | folder to store meetings                 | recordings                                                                                                                                                    |
-| RECORDING_VERIFY_SSL                            | verify ssl for recording storage         | true                                                                                                                                                          |
 | RECORDING_WORKER_CLASSES                        | worker classes for recording             | {"screen_recording": "core.recording.worker.services.VideoCompositeEgressService","transcript": "core.recording.worker.services.AudioCompositeEgressService"} |
 | RECORDING_EVENT_PARSER_CLASS                    | storage event engine for recording       | core.recording.event.parsers.MinioParser                                                                                                                      |
 | RECORDING_ENABLE_STORAGE_EVENT_AUTH             | enable storage event authorization       | true                                                                                                                                                          |

env.d/development/common.dist

@@ -15,7 +15,8 @@ DJANGO_EMAIL_PORT=1025
 DJANGO_EMAIL_BRAND_NAME=La Suite Numérique
 DJANGO_EMAIL_SUPPORT_EMAIL=test@yopmail.com
 DJANGO_EMAIL_LOGO_IMG=http://localhost:3000/assets/logo-suite-numerique.png
-DJANGO_EMAIL_DOMAIN=http://localhost:3000/
+DJANGO_EMAIL_DOMAIN=localhost:3000
+DJANGO_EMAIL_APP_BASE_URL=http://localhost:3000
 
 # Backend url
 MEET_BASE_URL="http://localhost:8072"
@@ -47,8 +48,12 @@ OIDC_AUTH_REQUEST_EXTRA_PARAMS={"acr_values": "eidas1"}
 # Livekit Token settings
 LIVEKIT_API_SECRET=secret
 LIVEKIT_API_KEY=devkey
-LIVEKIT_API_URL=http://localhost:7880
+LIVEKIT_API_URL=http://127.0.0.1.nip.io:7880
+LIVEKIT_VERIFY_SSL=False
 ALLOW_UNREGISTERED_ROOMS=False
 
 # Recording
 SCREEN_RECORDING_BASE_URL=http://localhost:3000/recordings
+
+# Telephony
+ROOM_TELEPHONY_ENABLED=True

src/backend/core/api/__init__.py

@@ -40,6 +40,7 @@ def get_frontend_configuration(request):
         "recording": {
             "is_enabled": settings.RECORDING_ENABLE,
             "available_modes": settings.RECORDING_WORKER_CLASSES.keys(),
+            "expiration_days": settings.RECORDING_EXPIRATION_DAYS,
         },
     }
     frontend_configuration.update(settings.FRONTEND_CONFIGURATION)

src/backend/core/api/permissions.py

@@ -94,7 +94,7 @@ class HasAbilityPermission(IsAuthenticated):
 class HasPrivilegesOnRoom(IsAuthenticated):
     """Check if user has privileges on a given room."""
 
-    message = "You must have privileges to start a recording."
+    message = "You must have privileges on room to perform this action."
 
     def has_object_permission(self, request, view, obj):
         """Determine if user has privileges on room."""

src/backend/core/api/serializers.py

@@ -4,6 +4,7 @@ from django.utils.translation import gettext_lazy as _
 
 from rest_framework import serializers
 from rest_framework.exceptions import PermissionDenied
+from timezone_field.rest_framework import TimeZoneSerializerField
 
 from core import models, utils
 
@@ -11,9 +12,11 @@ from core import models, utils
 class UserSerializer(serializers.ModelSerializer):
     """Serialize users."""
 
+    timezone = TimeZoneSerializerField()
+
     class Meta:
         model = models.User
-        fields = ["id", "email", "full_name", "short_name"]
+        fields = ["id", "email", "full_name", "short_name", "timezone", "language"]
         read_only_fields = ["id", "email", "full_name", "short_name"]
 
 
@@ -117,7 +120,7 @@ class RoomSerializer(serializers.ModelSerializer):
         role = instance.get_role(request.user)
         is_admin = models.RoleChoices.check_administrator_role(role)
 
-        if role is not None:
+        if is_admin:
             access_serializer = NestedResourceAccessSerializer(
                 instance.accesses.select_related("resource", "user").all(),
                 context=self.context,
@@ -156,7 +159,17 @@ class RecordingSerializer(serializers.ModelSerializer):
 
     class Meta:
         model = models.Recording
-        fields = ["id", "room", "created_at", "updated_at", "status", "mode"]
+        fields = [
+            "id",
+            "room",
+            "created_at",
+            "updated_at",
+            "status",
+            "mode",
+            "key",
+            "is_expired",
+            "expired_at",
+        ]
         read_only_fields = fields
 
 
@@ -189,11 +202,11 @@ class RequestEntrySerializer(serializers.Serializer):
 
     def create(self, validated_data):
         """Not implemented as this is a validation-only serializer."""
-        raise NotImplementedError("StartRecordingSerializer is validation-only")
+        raise NotImplementedError("RequestEntrySerializer is validation-only")
 
     def update(self, instance, validated_data):
         """Not implemented as this is a validation-only serializer."""
-        raise NotImplementedError("StartRecordingSerializer is validation-only")
+        raise NotImplementedError("RequestEntrySerializer is validation-only")
 
 
 class ParticipantEntrySerializer(serializers.Serializer):
@@ -204,11 +217,11 @@ class ParticipantEntrySerializer(serializers.Serializer):
 
     def create(self, validated_data):
         """Not implemented as this is a validation-only serializer."""
-        raise NotImplementedError("StartRecordingSerializer is validation-only")
+        raise NotImplementedError("ParticipantEntrySerializer is validation-only")
 
     def update(self, instance, validated_data):
         """Not implemented as this is a validation-only serializer."""
-        raise NotImplementedError("StartRecordingSerializer is validation-only")
+        raise NotImplementedError("ParticipantEntrySerializer is validation-only")
 
 
 class CreationCallbackSerializer(serializers.Serializer):
@@ -218,8 +231,22 @@ class CreationCallbackSerializer(serializers.Serializer):
 
     def create(self, validated_data):
         """Not implemented as this is a validation-only serializer."""
-        raise NotImplementedError("StartRecordingSerializer is validation-only")
+        raise NotImplementedError("CreationCallbackSerializer is validation-only")
 
     def update(self, instance, validated_data):
         """Not implemented as this is a validation-only serializer."""
-        raise NotImplementedError("StartRecordingSerializer is validation-only")
+        raise NotImplementedError("CreationCallbackSerializer is validation-only")
+
+
+class RoomInviteSerializer(serializers.Serializer):
+    """Validate room invite creation data."""
+
+    emails = serializers.ListField(child=serializers.EmailField(), allow_empty=False)
+
+    def create(self, validated_data):
+        """Not implemented as this is a validation-only serializer."""
+        raise NotImplementedError("RoomInviteSerializer is validation-only")
+
+    def update(self, instance, validated_data):
+        """Not implemented as this is a validation-only serializer."""
+        raise NotImplementedError("RoomInviteSerializer is validation-only")

src/backend/core/api/viewsets.py

@@ -41,6 +41,7 @@ from core.recording.worker.factories import (
 from core.recording.worker.mediator import (
     WorkerServiceMediator,
 )
+from core.services.invitation import InvitationService
 from core.services.livekit_events import (
     LiveKitEventsService,
     LiveKitWebhookError,
@@ -365,7 +366,7 @@ class RoomViewSet(
 
     @decorators.action(
         detail=True,
-        methods=["POST"],
+        methods=["post"],
         url_path="request-entry",
         permission_classes=[],
         throttle_classes=[RequestEntryAnonRateThrottle],
@@ -448,7 +449,7 @@ class RoomViewSet(
 
     @decorators.action(
         detail=False,
-        methods=["POST"],
+        methods=["post"],
         url_path="webhooks-livekit",
         permission_classes=[],
     )
@@ -474,7 +475,7 @@ class RoomViewSet(
 
     @decorators.action(
         detail=False,
-        methods=["POST"],
+        methods=["post"],
         url_path="creation-callback",
         permission_classes=[],
         throttle_classes=[CreationCallbackAnonRateThrottle],
@@ -497,41 +498,45 @@ class RoomViewSet(
             {"status": "success", "room": room}, status=drf_status.HTTP_200_OK
         )
 
+    @decorators.action(
+        detail=True,
+        methods=["post"],
+        url_path="invite",
+        permission_classes=[
+            permissions.HasPrivilegesOnRoom,
+        ],
+    )
+    def invite(self, request, pk=None):  # pylint: disable=unused-argument
+        """Send email invitations to join a room.
 
-class ResourceAccessListModelMixin:
-    """List mixin for resource access API."""
+        This API endpoint allows a user with appropriate privileges to send email invitations
+        to one or more recipients, inviting them to join the specified room.
+        """
 
-    def get_permissions(self):
-        """User only needs to be authenticated to list rooms access"""
-        if self.action == "list":
-            permission_classes = [permissions.IsAuthenticated]
-        else:
-            return super().get_permissions()
+        room = self.get_object()
 
-        return [permission() for permission in permission_classes]
+        serializer = serializers.RoomInviteSerializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
 
-    def get_queryset(self):
-        """Return the queryset according to the action."""
-        queryset = super().get_queryset()
-        if self.action == "list":
-            user = self.request.user
-            queryset = queryset.filter(
-                Q(resource__accesses__user=user),
-                resource__accesses__role__in=[
-                    models.RoleChoices.ADMIN,
-                    models.RoleChoices.OWNER,
-                ],
-            ).distinct()
-        return queryset
+        emails = serializer.validated_data.get("emails")
+        emails = list(set(emails))
+
+        InvitationService().invite_to_room(
+            room=room, sender=request.user, emails=emails
+        )
+
+        return drf_response.Response(
+            {"status": "success", "message": "invitations sent"},
+            status=drf_status.HTTP_200_OK,
+        )
 
 
 class ResourceAccessViewSet(
-    ResourceAccessListModelMixin,
     mixins.CreateModelMixin,
     mixins.DestroyModelMixin,
-    mixins.ListModelMixin,
     mixins.RetrieveModelMixin,
     mixins.UpdateModelMixin,
+    mixins.ListModelMixin,
     viewsets.GenericViewSet,
 ):
     """
@@ -542,6 +547,25 @@ class ResourceAccessViewSet(
     queryset = models.ResourceAccess.objects.all()
     serializer_class = serializers.ResourceAccessSerializer
 
+    def get_queryset(self):
+        """Return the queryset according to the action."""
+
+        queryset = super().get_queryset()
+
+        # Restrict access to resources the user either has explicit
+        # permissions for or administrative privileges over.
+        if self.action == "list":
+            user = self.request.user
+            queryset = queryset.filter(
+                Q(resource__accesses__user=user),
+                resource__accesses__role__in=[
+                    models.RoleChoices.ADMIN,
+                    models.RoleChoices.OWNER,
+                ],
+            ).distinct()
+
+        return queryset
+
 
 class RecordingViewSet(
     mixins.DestroyModelMixin,

src/backend/core/authentication/backends.py

@@ -1,12 +1,13 @@
 """Authentication Backends for the Meet core app."""
 
+import contextlib
+
 from django.conf import settings
 from django.core.exceptions import ImproperlyConfigured, SuspiciousOperation
 from django.utils.translation import gettext_lazy as _
 
-import requests
-from mozilla_django_oidc.auth import (
-    OIDCAuthenticationBackend as MozillaOIDCAuthenticationBackend,
+from lasuite.oidc_login.backends import (
+    OIDCAuthenticationBackend as LaSuiteOIDCAuthenticationBackend,
 )
 
 from core.models import User
@@ -17,93 +18,46 @@ from core.services.marketing import (
 )
 
 
-class OIDCAuthenticationBackend(MozillaOIDCAuthenticationBackend):
+class OIDCAuthenticationBackend(LaSuiteOIDCAuthenticationBackend):
     """Custom OpenID Connect (OIDC) Authentication Backend.
 
     This class overrides the default OIDC Authentication Backend to accommodate differences
     in the User and Identity models, and handles signed and/or encrypted UserInfo response.
     """
 
-    def get_userinfo(self, access_token, id_token, payload):
-        """Return user details dictionary.
+    def get_extra_claims(self, user_info):
+        """
+        Return extra claims from user_info.
 
-        Parameters:
-        - access_token (str): The access token.
-        - id_token (str): The id token (unused).
-        - payload (dict): The token payload (unused).
-
-        Note: The id_token and payload parameters are unused in this implementation,
-        but were kept to preserve base method signature.
-
-        Note: It handles signed and/or encrypted UserInfo Response. It is required by
-        Agent Connect, which follows the OIDC standard. It forces us to override the
-        base method, which deal with 'application/json' response.
+        Args:
+          user_info (dict): The user information dictionary.
 
         Returns:
-        - dict: User details dictionary obtained from the OpenID Connect user endpoint.
+          dict: A dictionary of extra claims.
+
         """
-
-        user_response = requests.get(
-            self.OIDC_OP_USER_ENDPOINT,
-            headers={"Authorization": f"Bearer {access_token}"},
-            verify=self.get_settings("OIDC_VERIFY_SSL", True),
-            timeout=self.get_settings("OIDC_TIMEOUT", None),
-            proxies=self.get_settings("OIDC_PROXY", None),
-        )
-        user_response.raise_for_status()
-        userinfo = self.verify_token(user_response.text)
-        return userinfo
-
-    def get_or_create_user(self, access_token, id_token, payload):
-        """Return a User based on userinfo. Get or create a new user if no user matches the Sub.
-
-        Parameters:
-        - access_token (str): The access token.
-        - id_token (str): The ID token.
-        - payload (dict): The user payload.
-
-        Returns:
-        - User: An existing or newly created User instance.
-
-        Raises:
-        - Exception: Raised when user creation is not allowed and no existing user is found.
-        """
-
-        user_info = self.get_userinfo(access_token, id_token, payload)
-        sub = user_info.get("sub")
-
-        if not sub:
-            raise SuspiciousOperation(
-                _("User info contained no recognizable user identification")
-            )
-
-        email = user_info.get("email")
-        user = self.get_existing_user(sub, email)
-
-        claims = {
-            "email": email,
+        return {
+            # Get user's full name from OIDC fields defined in settings
             "full_name": self.compute_full_name(user_info),
             "short_name": user_info.get(settings.OIDC_USERINFO_SHORTNAME_FIELD),
         }
-        if not user and self.get_settings("OIDC_CREATE_USER", True):
-            user = User.objects.create(
-                sub=sub,
-                password="!",  # noqa: S106
-                **claims,
-            )
 
-            if settings.SIGNUP_NEW_USER_TO_MARKETING_EMAIL:
-                self.signup_to_marketing_email(email)
+    def post_get_or_create_user(self, user, claims, is_new_user):
+        """
+        Post-processing after user creation or retrieval.
 
-        elif not user:
-            return None
+        Args:
+          user (User): The user instance.
+          claims (dict): The claims dictionary.
+          is_new_user (bool): Indicates if the user was newly created.
 
-        if not user.is_active:
-            raise SuspiciousOperation(_("User account is disabled"))
+        Returns:
+        - None
 
-        self.update_user_if_needed(user, claims)
-
-        return user
+        """
+        email = claims["email"]
+        if is_new_user and email and settings.SIGNUP_NEW_USER_TO_MARKETING_EMAIL:
+            self.signup_to_marketing_email(email)
 
     @staticmethod
     def signup_to_marketing_email(email):
@@ -116,7 +70,9 @@ class OIDCAuthenticationBackend(MozillaOIDCAuthenticationBackend):
 
         Note: For a more robust solution, consider using Async task processing (Celery/Django-Q)
         """
-        try:
+        with contextlib.suppress(
+            ContactCreationError, ImproperlyConfigured, ImportError
+        ):
             marketing_service = get_marketing_service()
             contact_data = ContactData(
                 email=email, attributes={"VISIO_SOURCE": ["SIGNIN"]}
@@ -124,8 +80,6 @@ class OIDCAuthenticationBackend(MozillaOIDCAuthenticationBackend):
             marketing_service.create_contact(
                 contact_data, timeout=settings.BREVO_API_TIMEOUT
             )
-        except (ContactCreationError, ImproperlyConfigured, ImportError):
-            pass
 
     def get_existing_user(self, sub, email):
         """Fetch existing user by sub or email."""
@@ -139,35 +93,6 @@ class OIDCAuthenticationBackend(MozillaOIDCAuthenticationBackend):
                     pass
                 except User.MultipleObjectsReturned as e:
                     raise SuspiciousOperation(
-                        _("Multiple user accounts share a common email.")
+                        "Multiple user accounts share a common email."
                     ) from e
         return None
-
-    @staticmethod
-    def compute_full_name(user_info):
-        """Compute user's full name based on OIDC fields in settings."""
-        full_name = " ".join(
-            filter(
-                None,
-                (
-                    user_info.get(field)
-                    for field in settings.OIDC_USERINFO_FULLNAME_FIELDS
-                ),
-            )
-        )
-        return full_name or None
-
-    @staticmethod
-    def update_user_if_needed(user, claims):
-        """Update user claims if they have changed."""
-        user_fields = vars(user.__class__)  # Get available model fields
-        updated_claims = {
-            key: value
-            for key, value in claims.items()
-            if value and key in user_fields and value != getattr(user, key)
-        }
-
-        if not updated_claims:
-            return
-
-        User.objects.filter(sub=user.sub).update(**updated_claims)

src/backend/core/authentication/urls.py

@@ -1,18 +0,0 @@
-"""Authentication URLs for the People core app."""
-
-from django.urls import path
-
-from mozilla_django_oidc.urls import urlpatterns as mozzila_oidc_urls
-
-from .views import OIDCLogoutCallbackView, OIDCLogoutView
-
-urlpatterns = [
-    # Override the default 'logout/' path from Mozilla Django OIDC with our custom view.
-    path("logout/", OIDCLogoutView.as_view(), name="oidc_logout_custom"),
-    path(
-        "logout-callback/",
-        OIDCLogoutCallbackView.as_view(),
-        name="oidc_logout_callback",
-    ),
-    *mozzila_oidc_urls,
-]

src/backend/core/authentication/views.py

@@ -1,181 +0,0 @@
-"""Authentication Views for the People core app."""
-
-import copy
-from urllib.parse import urlencode
-
-from django.contrib import auth
-from django.core.exceptions import SuspiciousOperation
-from django.http import HttpResponseRedirect
-from django.urls import reverse
-from django.utils import crypto
-
-from mozilla_django_oidc.utils import (
-    absolutify,
-)
-from mozilla_django_oidc.views import (
-    OIDCAuthenticationCallbackView as MozillaOIDCAuthenticationCallbackView,
-)
-from mozilla_django_oidc.views import (
-    OIDCAuthenticationRequestView as MozillaOIDCAuthenticationRequestView,
-)
-from mozilla_django_oidc.views import (
-    OIDCLogoutView as MozillaOIDCOIDCLogoutView,
-)
-
-
-class OIDCLogoutView(MozillaOIDCOIDCLogoutView):
-    """Custom logout view for handling OpenID Connect (OIDC) logout flow.
-
-    Adds support for handling logout callbacks from the identity provider (OP)
-    by initiating the logout flow if the user has an active session.
-
-    The Django session is retained during the logout process to persist the 'state' OIDC parameter.
-    This parameter is crucial for maintaining the integrity of the logout flow between this call
-    and the subsequent callback.
-    """
-
-    @staticmethod
-    def persist_state(request, state):
-        """Persist the given 'state' parameter in the session's 'oidc_states' dictionary
-
-        This method is used to store the OIDC state parameter in the session, according to the
-        structure expected by Mozilla Django OIDC's 'add_state_and_verifier_and_nonce_to_session'
-        utility function.
-        """
-
-        if "oidc_states" not in request.session or not isinstance(
-            request.session["oidc_states"], dict
-        ):
-            request.session["oidc_states"] = {}
-
-        request.session["oidc_states"][state] = {}
-        request.session.save()
-
-    def construct_oidc_logout_url(self, request):
-        """Create the redirect URL for interfacing with the OIDC provider.
-
-        Retrieves the necessary parameters from the session and constructs the URL
-        required to initiate logout with the OpenID Connect provider.
-
-        If no ID token is found in the session, the logout flow will not be initiated,
-        and the method will return the default redirect URL.
-
-        The 'state' parameter is generated randomly and persisted in the session to ensure
-        its integrity during the subsequent callback.
-        """
-
-        oidc_logout_endpoint = self.get_settings("OIDC_OP_LOGOUT_ENDPOINT")
-
-        if not oidc_logout_endpoint:
-            return self.redirect_url
-
-        reverse_url = reverse("oidc_logout_callback")
-        id_token = request.session.get("oidc_id_token", None)
-
-        if not id_token:
-            return self.redirect_url
-
-        query = {
-            "id_token_hint": id_token,
-            "state": crypto.get_random_string(self.get_settings("OIDC_STATE_SIZE", 32)),
-            "post_logout_redirect_uri": absolutify(request, reverse_url),
-        }
-
-        self.persist_state(request, query["state"])
-
-        return f"{oidc_logout_endpoint}?{urlencode(query)}"
-
-    def post(self, request):
-        """Handle user logout.
-
-        If the user is not authenticated, redirects to the default logout URL.
-        Otherwise, constructs the OIDC logout URL and redirects the user to start
-        the logout process.
-
-        If the user is redirected to the default logout URL, ensure her Django session
-        is terminated.
-        """
-
-        logout_url = self.redirect_url
-
-        if request.user.is_authenticated:
-            logout_url = self.construct_oidc_logout_url(request)
-
-        # If the user is not redirected to the OIDC provider, ensure logout
-        if logout_url == self.redirect_url:
-            auth.logout(request)
-
-        return HttpResponseRedirect(logout_url)
-
-
-class OIDCLogoutCallbackView(MozillaOIDCOIDCLogoutView):
-    """Custom view for handling the logout callback from the OpenID Connect (OIDC) provider.
-
-    Handles the callback after logout from the identity provider (OP).
-    Verifies the state parameter and performs necessary logout actions.
-
-    The Django session is maintained during the logout process to ensure the integrity
-    of the logout flow initiated in the previous step.
-    """
-
-    http_method_names = ["get"]
-
-    def get(self, request):
-        """Handle the logout callback.
-
-        If the user is not authenticated, redirects to the default logout URL.
-        Otherwise, verifies the state parameter and performs necessary logout actions.
-        """
-
-        if not request.user.is_authenticated:
-            return HttpResponseRedirect(self.redirect_url)
-
-        state = request.GET.get("state")
-
-        if state not in request.session.get("oidc_states", {}):
-            msg = "OIDC callback state not found in session `oidc_states`!"
-            raise SuspiciousOperation(msg)
-
-        del request.session["oidc_states"][state]
-        request.session.save()
-
-        auth.logout(request)
-
-        return HttpResponseRedirect(self.redirect_url)
-
-
-class OIDCAuthenticationCallbackView(MozillaOIDCAuthenticationCallbackView):
-    """Custom callback view for handling the silent login flow."""
-
-    @property
-    def failure_url(self):
-        """Override the failure URL property to handle silent login flow
-
-        A silent login failure (e.g., no active user session) should not be
-        considered as an authentication failure.
-        """
-        if self.request.session.get("silent", None):
-            del self.request.session["silent"]
-            self.request.session.save()
-            return self.success_url
-        return super().failure_url
-
-
-class OIDCAuthenticationRequestView(MozillaOIDCAuthenticationRequestView):
-    """Custom authentication view for handling the silent login flow."""
-
-    def get_extra_params(self, request):
-        """Handle 'prompt' extra parameter for the silent login flow
-
-        This extra parameter is necessary to distinguish between a standard
-        authentication flow and the silent login flow.
-        """
-        extra_params = self.get_settings("OIDC_AUTH_REQUEST_EXTRA_PARAMS", None)
-        if extra_params is None:
-            extra_params = {}
-        if request.GET.get("silent") == "true":
-            extra_params = copy.deepcopy(extra_params)
-            extra_params.update({"prompt": "none"})
-            request.session["silent"] = True
-            request.session.save()
-        return extra_params

src/backend/core/migrations/0013_alter_user_language.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.1.8 on 2025-04-22 14:52
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('core', '0012_alter_room_access_level'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='user',
+            name='language',
+            field=models.CharField(choices="(('en-us', 'English'), ('fr-fr', 'French'), ('nl-nl', 'Dutch'))", default='en-us', help_text='The language in which the user wants to see the interface.', max_length=10, verbose_name='language'),
+        ),
+    ]

src/backend/core/migrations/0014_room_pin_code.py

@@ -0,0 +1,45 @@
+# Generated by Django 5.1.9 on 2025-05-13 08:22
+
+import secrets
+from django.db import migrations, models
+
+
+def generate_pin_for_rooms(apps, schema_editor):
+    """Generate unique 10-digit PIN codes for existing rooms.
+    The PIN code is required for SIP telephony features.
+    """
+    Room = apps.get_model('core', 'Room')
+    rooms_without_pin_code = Room.objects.filter(pin_code__isnull=True)
+    existing_pins = set(Room.objects.values_list('pin_code', flat=True))
+
+    length = 10
+
+    def generate_pin_code():
+        while True:
+            pin_code = str(secrets.randbelow(10 ** length)).zfill(length)
+            if not pin_code in existing_pins:
+                return pin_code
+
+    for room in rooms_without_pin_code:
+        room.pin_code = generate_pin_code()
+        room.save()
+
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('core', '0013_alter_user_language'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='room',
+            name='pin_code',
+            field=models.CharField(blank=True, help_text='Unique n-digit code that identifies this room in telephony mode.', max_length=None, null=True, unique=True, verbose_name='Room PIN code'),
+        ),
+        migrations.RunPython(
+            generate_pin_for_rooms,
+            reverse_code=migrations.RunPython.noop
+        ),
+    ]

src/backend/core/models.py

@@ -2,9 +2,11 @@
 Declare and configure the models for the Meet core application
 """
 
+import secrets
 import uuid
+from datetime import datetime, timedelta
 from logging import getLogger
-from typing import List
+from typing import List, Optional
 
 from django.conf import settings
 from django.contrib.auth import models as auth_models
@@ -12,7 +14,7 @@ from django.contrib.auth.base_user import AbstractBaseUser
 from django.core import mail, validators
 from django.core.exceptions import PermissionDenied, ValidationError
 from django.db import models
-from django.utils.functional import lazy
+from django.utils import timezone
 from django.utils.text import capfirst, slugify
 from django.utils.translation import gettext_lazy as _
 
@@ -162,7 +164,7 @@ class User(AbstractBaseUser, BaseModel, auth_models.PermissionsMixin):
     )
     language = models.CharField(
         max_length=10,
-        choices=lazy(lambda: settings.LANGUAGES, tuple)(),
+        choices=settings.LANGUAGES,
         default=settings.LANGUAGE_CODE,
         verbose_name=_("language"),
         help_text=_("The language in which the user wants to see the interface."),
@@ -381,6 +383,14 @@ class Room(Resource):
         verbose_name=_("Visio room configuration"),
         help_text=_("Values for Visio parameters to configure the room."),
     )
+    pin_code = models.CharField(
+        max_length=None,
+        unique=True,
+        blank=True,
+        null=True,
+        verbose_name=_("Room PIN code"),
+        help_text=_("Unique n-digit code that identifies this room in telephony mode."),
+    )
 
     class Meta:
         db_table = "meet_room"
@@ -391,6 +401,14 @@ class Room(Resource):
     def __str__(self):
         return capfirst(self.name)
 
+    def save(self, *args, **kwargs):
+        """Generate a unique n-digit pin code for new rooms."""
+        if settings.ROOM_TELEPHONY_ENABLED and not self.pk and not self.pin_code:
+            self.pin_code = self.generate_unique_pin_code(
+                length=settings.ROOM_TELEPHONY_PIN_LENGTH
+            )
+        super().save(*args, **kwargs)
+
     def clean_fields(self, exclude=None):
         """
         Automatically generate the slug from the name and make sure it does not look like a UUID.
@@ -405,6 +423,7 @@ class Room(Resource):
             pass
         else:
             raise ValidationError({"name": f'Room name "{self.name:s}" is reserved.'})
+
         super().clean_fields(exclude=exclude)
 
     @property
@@ -412,6 +431,31 @@ class Room(Resource):
         """Check if a room is public"""
         return self.access_level == RoomAccessLevel.PUBLIC
 
+    @staticmethod
+    def generate_unique_pin_code(length):
+        """Generate a unique n-digit PIN code"""
+
+        if length < 4:
+            raise ValueError(
+                "PIN code length must be at least 4 digits for minimal security"
+            )
+
+        max_value = 10**length
+
+        for _ in range(settings.ROOM_TELEPHONY_PIN_MAX_RETRIES):
+            pin_code = str(secrets.randbelow(max_value)).zfill(length)
+            if not Room.objects.filter(pin_code=pin_code).exists():
+                return pin_code
+
+        # Log a warning as a temporary measure until backend observability is implemented.
+        logger.warning(
+            "Failed to generate unique PIN code of length %s after %s attempts",
+            length,
+            settings.ROOM_TELEPHONY_PIN_MAX_RETRIES,
+        )
+
+        return None
+
 
 class BaseAccessManager(models.Manager):
     """Base manager for handling resource access control."""
@@ -581,7 +625,10 @@ class Recording(BaseModel):
     @property
     def is_saved(self) -> bool:
         """Check if the recording is in a saved state."""
-        return self.status == RecordingStatusChoices.SAVED
+        return self.status in {
+            RecordingStatusChoices.NOTIFICATION_SUCCEEDED,
+            RecordingStatusChoices.SAVED,
+        }
 
     @property
     def extension(self):
@@ -598,6 +645,34 @@ class Recording(BaseModel):
 
         return f"{settings.RECORDING_OUTPUT_FOLDER}/{self.id}.{self.extension}"
 
+    @property
+    def expired_at(self) -> Optional[datetime]:
+        """
+        Calculate the expiration date based on created_at and RECORDING_EXPIRATION_DAYS.
+        Returns None if no expiration is configured.
+
+        Note: This is a naive and imperfect implementation since recordings are actually
+        saved to the bucket after created_at timestamp is set. The actual expiration
+        will be determined by the bucket lifecycle policy which operates on the object's
+        timestamp in the storage system, not this value.
+        """
+
+        if not settings.RECORDING_EXPIRATION_DAYS:
+            return None
+
+        return self.created_at + timedelta(days=settings.RECORDING_EXPIRATION_DAYS)
+
+    @property
+    def is_expired(self) -> bool:
+        """
+        Determine if the recording has expired by comparing expired_at with current UTC time.
+        Returns False if no expiration is configured or if expiration date is in the future.
+        """
+        if not self.expired_at:
+            return False
+
+        return self.expired_at < timezone.now()
+
 
 class RecordingAccess(BaseAccess):
     """Relation model to give access to a recording for a user or a team with a role."""

src/backend/core/recording/event/authentication.py

@@ -55,7 +55,7 @@ class StorageEventAuthentication(BaseAuthentication):
         if not required_token:
             if settings.RECORDING_ENABLE_STORAGE_EVENT_AUTH:
                 raise AuthenticationFailed(
-                    _("Authentication is enabled but token is not configured.")
+                    "Authentication is enabled but token is not configured."
                 )
 
             return MachineUser(), None
@@ -67,7 +67,7 @@ class StorageEventAuthentication(BaseAuthentication):
                 "Authentication failed: Missing Authorization header (ip: %s)",
                 request.META.get("REMOTE_ADDR"),
             )
-            raise AuthenticationFailed(_("Authorization header is required"))
+            raise AuthenticationFailed("Authorization header is required")
 
         auth_parts = auth_header.split(" ")
         if len(auth_parts) != 2 or auth_parts[0] != self.TOKEN_TYPE:
@@ -75,7 +75,7 @@ class StorageEventAuthentication(BaseAuthentication):
                 "Authentication failed: Invalid authorization header (ip: %s)",
                 request.META.get("REMOTE_ADDR"),
             )
-            raise AuthenticationFailed(_("Invalid authorization header."))
+            raise AuthenticationFailed("Invalid authorization header.")
 
         token = auth_parts[1]
 
@@ -85,7 +85,7 @@ class StorageEventAuthentication(BaseAuthentication):
                 "Authentication failed: Invalid token (ip: %s)",
                 request.META.get("REMOTE_ADDR"),
             )
-            raise AuthenticationFailed(_("Invalid token"))
+            raise AuthenticationFailed("Invalid token")
 
         return MachineUser(), token
 

src/backend/core/recording/event/notification.py

@@ -44,49 +44,69 @@ class NotificationService:
         page in the frontend where they can access their specific recording.
         """
 
-        owner_accesses = models.RecordingAccess.objects.select_related("user").filter(
-            role=models.RoleChoices.OWNER,
-            recording_id=recording.id,
+        owner_accesses = (
+            models.RecordingAccess.objects.select_related("user")
+            .filter(
+                role=models.RoleChoices.OWNER,
+                recording_id=recording.id,
+            )
+            .order_by("created_at")
         )
 
         if not owner_accesses:
             logger.error("No owner found for recording %s", recording.id)
             return False
 
-        language = get_language()
-
         context = {
             "brandname": settings.EMAIL_BRAND_NAME,
             "support_email": settings.EMAIL_SUPPORT_EMAIL,
             "logo_img": settings.EMAIL_LOGO_IMG,
             "domain": settings.EMAIL_DOMAIN,
             "room_name": recording.room.name,
-            "recording_date": recording.created_at.strftime("%A %d %B %Y"),
-            "recording_time": recording.created_at.strftime("%H:%M"),
+            "recording_expiration_days": settings.RECORDING_EXPIRATION_DAYS,
             "link": f"{settings.SCREEN_RECORDING_BASE_URL}/{recording.id}",
         }
 
-        emails = [access.user.email for access in owner_accesses]
+        has_failures = False
 
-        with override(language):
-            msg_html = render_to_string("mail/html/screen_recording.html", context)
-            msg_plain = render_to_string("mail/text/screen_recording.txt", context)
-            subject = str(_("Your recording is ready"))  # Force translation
-
-            try:
-                send_mail(
-                    subject.capitalize(),
-                    msg_plain,
-                    settings.EMAIL_FROM,
-                    emails,
-                    html_message=msg_html,
-                    fail_silently=False,
+        # We process emails individually rather than in batch because:
+        # 1. Each email requires personalization (timezone, language)
+        # 2. The number of recipients per recording is typically small (not thousands)
+        for access in owner_accesses:
+            user = access.user
+            language = user.language or get_language()
+            with override(language):
+                personalized_context = {
+                    "recording_date": recording.created_at.astimezone(
+                        user.timezone
+                    ).strftime("%Y-%m-%d"),
+                    "recording_time": recording.created_at.astimezone(
+                        user.timezone
+                    ).strftime("%H:%M"),
+                    **context,
+                }
+                msg_html = render_to_string(
+                    "mail/html/screen_recording.html", personalized_context
                 )
-            except smtplib.SMTPException as exception:
-                logger.error("notification to %s was not sent: %s", emails, exception)
-                return False
+                msg_plain = render_to_string(
+                    "mail/text/screen_recording.txt", personalized_context
+                )
+                subject = str(_("Your recording is ready"))  # Force translation
 
-        return True
+                try:
+                    send_mail(
+                        subject.capitalize(),
+                        msg_plain,
+                        settings.EMAIL_FROM,
+                        [user.email],
+                        html_message=msg_html,
+                        fail_silently=False,
+                    )
+                except smtplib.SMTPException as exception:
+                    logger.error("notification could not be sent: %s", exception)
+                    has_failures = True
+
+        return not has_failures
 
     @staticmethod
     def _notify_summary_service(recording):

src/backend/core/recording/worker/factories.py

@@ -17,7 +17,6 @@ class WorkerServiceConfig:
 
     output_folder: str
     server_configurations: Dict[str, Any]
-    verify_ssl: Optional[bool]
     bucket_args: Optional[dict]
 
     @classmethod
@@ -29,7 +28,6 @@ class WorkerServiceConfig:
         return cls(
             output_folder=settings.RECORDING_OUTPUT_FOLDER,
             server_configurations=settings.LIVEKIT_CONFIGURATION,
-            verify_ssl=settings.RECORDING_VERIFY_SSL,
             bucket_args={
                 "endpoint": settings.AWS_S3_ENDPOINT_URL,
                 "access_key": settings.AWS_S3_ACCESS_KEY_ID,

src/backend/core/recording/worker/services.py

@@ -2,11 +2,10 @@
 
 # pylint: disable=no-member
 
-import aiohttp
 from asgiref.sync import async_to_sync
 from livekit import api as livekit_api
-from livekit.api.egress_service import EgressService
 
+from ... import utils
 from ..enums import FileExtension
 from .exceptions import WorkerConnectionError, WorkerResponseError
 from .factories import WorkerServiceConfig
@@ -29,21 +28,26 @@ class BaseEgressService:
     async def _handle_request(self, request, method_name: str):
         """Handle making a request to the LiveKit API and returns the response."""
 
-        # Use HTTP connector for local development with Tilt,
-        # where cluster communications are unsecure
-        connector = aiohttp.TCPConnector(ssl=self._config.verify_ssl)
+        lkapi = utils.create_livekit_client(self._config.server_configurations)
 
-        async with aiohttp.ClientSession(connector=connector) as session:
-            client = EgressService(session, **self._config.server_configurations)
-            method = getattr(client, method_name)
-            try:
-                response = await method(request)
-            except livekit_api.TwirpError as e:
-                raise WorkerConnectionError(
-                    f"LiveKit client connection error, {e.message}."
-                ) from e
+        # ruff: noqa: SLF001
+        # pylint: disable=protected-access
+        method = getattr(lkapi._egress, method_name)
 
+        try:
+            response = await method(request)
             return response
+        except livekit_api.TwirpError as e:
+            raise WorkerConnectionError(
+                f"LiveKit client connection error, {e.message}."
+            ) from e
+        except Exception as e:
+            raise WorkerConnectionError(
+                f"Unexpected error during LiveKit client connection: {str(e)}"
+            ) from e
+
+        finally:
+            await lkapi.aclose()
 
     def stop(self, worker_id: str) -> str:
         """Stop an ongoing egress worker.
@@ -101,8 +105,7 @@ class VideoCompositeEgressService(BaseEgressService):
         )
 
         request = livekit_api.RoomCompositeEgressRequest(
-            room_name=room_name,
-            file_outputs=[file_output],
+            room_name=room_name, file_outputs=[file_output], layout="speaker-light"
         )
 
         response = self._handle_request(request, "start_room_composite_egress")

src/backend/core/services/invitation.py

@@ -0,0 +1,59 @@
+"""Invitation Service."""
+
+import smtplib
+from logging import getLogger
+
+from django.conf import settings
+from django.core.mail import send_mail
+from django.template.loader import render_to_string
+from django.utils.translation import get_language, override
+from django.utils.translation import gettext_lazy as _
+
+logger = getLogger(__name__)
+
+
+class InvitationError(Exception):
+    """Exception raised when invitation emails cannot be sent."""
+
+    status_code = 500
+
+
+class InvitationService:
+    """Service for invitations to users."""
+
+    @staticmethod
+    def invite_to_room(room, sender, emails):
+        """Send invitation emails to join a room."""
+
+        language = get_language()
+
+        context = {
+            "brandname": settings.EMAIL_BRAND_NAME,
+            "logo_img": settings.EMAIL_LOGO_IMG,
+            "domain": settings.EMAIL_DOMAIN,
+            "room_url": f"{settings.EMAIL_APP_BASE_URL}/{room.slug}",
+            "room_link": f"{settings.EMAIL_DOMAIN}/{room.slug}",
+            "sender_email": sender.email,
+        }
+
+        with override(language):
+            msg_html = render_to_string("mail/html/invitation.html", context)
+            msg_plain = render_to_string("mail/text/invitation.txt", context)
+            subject = str(
+                _(
+                    f"Video call in progress: {sender.email} is waiting for you to connect"
+                )
+            )  # Force translation
+
+            try:
+                send_mail(
+                    subject,
+                    msg_plain,
+                    settings.EMAIL_FROM,
+                    emails,
+                    html_message=msg_html,
+                    fail_silently=False,
+                )
+            except smtplib.SMTPException as e:
+                logger.error("invitation to %s was not sent: %s", emails, e)
+                raise InvitationError("Could not send invitation") from e

src/backend/core/services/lobby.py

@@ -14,7 +14,6 @@ from django.core.cache import cache
 from asgiref.sync import async_to_sync
 from livekit.api import (  # pylint: disable=E0611
     ListRoomsRequest,
-    LiveKitAPI,
     SendDataRequest,
     TwirpError,
 )
@@ -347,7 +346,7 @@ class LobbyService:
             "type": settings.LOBBY_NOTIFICATION_TYPE,
         }
 
-        lkapi = LiveKitAPI(**settings.LIVEKIT_CONFIGURATION)
+        lkapi = utils.create_livekit_client()
 
         try:
             room_response = await lkapi.room.list_rooms(

src/backend/core/tests/authentication/test_backends.py

@@ -58,7 +58,7 @@ def test_authentication_getter_new_user_no_email(monkeypatch):
 
     assert user.sub == "123"
     assert user.email is None
-    assert user.password == "!"
+    assert user.has_usable_password() is False
     assert models.User.objects.count() == 1
 
 
@@ -84,7 +84,7 @@ def test_authentication_getter_new_user_with_email(monkeypatch):
     assert user.email == email
     assert user.full_name is None
     assert user.short_name is None
-    assert user.password == "!"
+    assert user.has_usable_password() is False
     assert models.User.objects.count() == 1
 
 
@@ -110,7 +110,7 @@ def test_authentication_getter_new_user_with_names(monkeypatch, email):
     assert user.email == email
     assert user.full_name == "John Doe"
     assert user.short_name == "John"
-    assert user.password == "!"
+    assert user.has_usable_password() is False
     assert models.User.objects.count() == 1
 
 
@@ -129,7 +129,7 @@ def test_models_oidc_user_getter_invalid_token(django_assert_num_queries, monkey
         django_assert_num_queries(0),
         pytest.raises(
             SuspiciousOperation,
-            match="User info contained no recognizable user identification",
+            match="Claims verification failed",
         ),
     ):
         klass.get_or_create_user(access_token="test-token", id_token=None, payload=None)

src/backend/core/tests/authentication/test_urls.py

@@ -1,10 +0,0 @@
-"""Unit tests for the Authentication URLs."""
-
-from core.authentication.urls import urlpatterns
-
-
-def test_urls_override_default_mozilla_django_oidc():
-    """Custom URL patterns should override default ones from Mozilla Django OIDC."""
-
-    url_names = [u.name for u in urlpatterns]
-    assert url_names.index("oidc_logout_custom") < url_names.index("oidc_logout")

src/backend/core/tests/authentication/test_views.py

@@ -1,359 +0,0 @@
-"""Unit tests for the Authentication Views."""
-
-from unittest import mock
-from urllib.parse import parse_qs, urlparse
-
-from django.contrib.auth.models import AnonymousUser
-from django.contrib.sessions.middleware import SessionMiddleware
-from django.core.exceptions import SuspiciousOperation
-from django.test import RequestFactory
-from django.test.utils import override_settings
-from django.urls import reverse
-from django.utils import crypto
-
-import pytest
-from rest_framework.test import APIClient
-
-from core import factories
-from core.authentication.views import (
-    MozillaOIDCAuthenticationCallbackView,
-    OIDCAuthenticationCallbackView,
-    OIDCAuthenticationRequestView,
-    OIDCLogoutCallbackView,
-    OIDCLogoutView,
-)
-
-pytestmark = pytest.mark.django_db
-
-
-@override_settings(LOGOUT_REDIRECT_URL="/example-logout")
-def test_view_logout_anonymous():
-    """Anonymous users calling the logout url,
-    should be redirected to the specified LOGOUT_REDIRECT_URL."""
-
-    url = reverse("oidc_logout_custom")
-    response = APIClient().get(url)
-
-    assert response.status_code == 302
-    assert response.url == "/example-logout"
-
-
-@mock.patch.object(
-    OIDCLogoutView, "construct_oidc_logout_url", return_value="/example-logout"
-)
-def test_view_logout(mocked_oidc_logout_url):
-    """Authenticated users should be redirected to OIDC provider for logout."""
-
-    user = factories.UserFactory()
-
-    client = APIClient()
-    client.force_login(user)
-
-    url = reverse("oidc_logout_custom")
-    response = client.get(url)
-
-    mocked_oidc_logout_url.assert_called_once()
-
-    assert response.status_code == 302
-    assert response.url == "/example-logout"
-
-
-@override_settings(LOGOUT_REDIRECT_URL="/default-redirect-logout")
-@mock.patch.object(
-    OIDCLogoutView, "construct_oidc_logout_url", return_value="/default-redirect-logout"
-)
-def test_view_logout_no_oidc_provider(mocked_oidc_logout_url):
-    """Authenticated users should be logged out when no OIDC provider is available."""
-
-    user = factories.UserFactory()
-
-    client = APIClient()
-    client.force_login(user)
-
-    url = reverse("oidc_logout_custom")
-
-    with mock.patch("mozilla_django_oidc.views.auth.logout") as mock_logout:
-        response = client.get(url)
-        mocked_oidc_logout_url.assert_called_once()
-        mock_logout.assert_called_once()
-
-    assert response.status_code == 302
-    assert response.url == "/default-redirect-logout"
-
-
-@override_settings(LOGOUT_REDIRECT_URL="/example-logout")
-def test_view_logout_callback_anonymous():
-    """Anonymous users calling the logout callback url,
-    should be redirected to the specified LOGOUT_REDIRECT_URL."""
-
-    url = reverse("oidc_logout_callback")
-    response = APIClient().get(url)
-
-    assert response.status_code == 302
-    assert response.url == "/example-logout"
-
-
-@pytest.mark.parametrize(
-    "initial_oidc_states",
-    [{}, {"other_state": "foo"}],
-)
-def test_view_logout_persist_state(initial_oidc_states):
-    """State value should be persisted in session's data."""
-
-    user = factories.UserFactory()
-
-    request = RequestFactory().request()
-    request.user = user
-
-    middleware = SessionMiddleware(get_response=lambda x: x)
-    middleware.process_request(request)
-
-    if initial_oidc_states:
-        request.session["oidc_states"] = initial_oidc_states
-        request.session.save()
-
-    mocked_state = "mock_state"
-
-    OIDCLogoutView().persist_state(request, mocked_state)
-
-    assert "oidc_states" in request.session
-    assert request.session["oidc_states"] == {
-        "mock_state": {},
-        **initial_oidc_states,
-    }
-
-
-@override_settings(OIDC_OP_LOGOUT_ENDPOINT="/example-logout")
-@mock.patch.object(OIDCLogoutView, "persist_state")
-@mock.patch.object(crypto, "get_random_string", return_value="mocked_state")
-def test_view_logout_construct_oidc_logout_url(
-    mocked_get_random_string, mocked_persist_state
-):
-    """Should construct the logout URL to initiate the logout flow with the OIDC provider."""
-
-    user = factories.UserFactory()
-
-    request = RequestFactory().request()
-    request.user = user
-
-    middleware = SessionMiddleware(get_response=lambda x: x)
-    middleware.process_request(request)
-
-    request.session["oidc_id_token"] = "mocked_oidc_id_token"
-    request.session.save()
-
-    redirect_url = OIDCLogoutView().construct_oidc_logout_url(request)
-
-    mocked_persist_state.assert_called_once()
-    mocked_get_random_string.assert_called_once()
-
-    params = parse_qs(urlparse(redirect_url).query)
-
-    assert params["id_token_hint"][0] == "mocked_oidc_id_token"
-    assert params["state"][0] == "mocked_state"
-
-    url = reverse("oidc_logout_callback")
-    assert url in params["post_logout_redirect_uri"][0]
-
-
-@override_settings(LOGOUT_REDIRECT_URL="/")
-def test_view_logout_construct_oidc_logout_url_none_id_token():
-    """If no ID token is available in the session,
-    the user should be redirected to the final URL."""
-
-    user = factories.UserFactory()
-
-    request = RequestFactory().request()
-    request.user = user
-
-    middleware = SessionMiddleware(get_response=lambda x: x)
-    middleware.process_request(request)
-
-    redirect_url = OIDCLogoutView().construct_oidc_logout_url(request)
-
-    assert redirect_url == "/"
-
-
-@pytest.mark.parametrize(
-    "initial_state",
-    [None, {"other_state": "foo"}],
-)
-def test_view_logout_callback_wrong_state(initial_state):
-    """Should raise an error if OIDC state doesn't match session data."""
-
-    user = factories.UserFactory()
-
-    request = RequestFactory().request()
-    request.user = user
-
-    middleware = SessionMiddleware(get_response=lambda x: x)
-    middleware.process_request(request)
-
-    if initial_state:
-        request.session["oidc_states"] = initial_state
-        request.session.save()
-
-    callback_view = OIDCLogoutCallbackView.as_view()
-
-    with pytest.raises(SuspiciousOperation) as excinfo:
-        callback_view(request)
-
-    assert (
-        str(excinfo.value) == "OIDC callback state not found in session `oidc_states`!"
-    )
-
-
-@override_settings(LOGOUT_REDIRECT_URL="/example-logout")
-def test_view_logout_callback():
-    """If state matches, callback should clear OIDC state and redirects."""
-
-    user = factories.UserFactory()
-
-    request = RequestFactory().get("/logout-callback/", data={"state": "mocked_state"})
-    request.user = user
-
-    middleware = SessionMiddleware(get_response=lambda x: x)
-    middleware.process_request(request)
-
-    mocked_state = "mocked_state"
-
-    request.session["oidc_states"] = {mocked_state: {}}
-    request.session.save()
-
-    callback_view = OIDCLogoutCallbackView.as_view()
-
-    with mock.patch("mozilla_django_oidc.views.auth.logout") as mock_logout:
-
-        def clear_user(request):
-            # Assert state is cleared prior to logout
-            assert request.session["oidc_states"] == {}
-            request.user = AnonymousUser()
-
-        mock_logout.side_effect = clear_user
-        response = callback_view(request)
-        mock_logout.assert_called_once()
-
-    assert response.status_code == 302
-    assert response.url == "/example-logout"
-
-
-@pytest.mark.parametrize("mocked_extra_params_setting", [{"foo": 123}, {}, None])
-def test_view_authentication_default(settings, mocked_extra_params_setting):
-    """By default, authentication request should not trigger silent login."""
-
-    settings.OIDC_AUTH_REQUEST_EXTRA_PARAMS = mocked_extra_params_setting
-
-    user = factories.UserFactory()
-
-    request = RequestFactory().request()
-    request.user = user
-    request.GET = {}
-
-    view = OIDCAuthenticationRequestView()
-    extra_params = view.get_extra_params(request)
-
-    assert extra_params == (mocked_extra_params_setting or {})
-
-
-@pytest.mark.parametrize("mocked_extra_params_setting", [{"foo": 123}, {}, None])
-def test_view_authentication_silent_false(settings, mocked_extra_params_setting):
-    """Ensure setting 'silent' parameter to a random value doesn't trigger the silent login flow."""
-
-    settings.OIDC_AUTH_REQUEST_EXTRA_PARAMS = mocked_extra_params_setting
-
-    user = factories.UserFactory()
-
-    request = RequestFactory().request()
-    request.user = user
-    request.GET = {"silent": "foo"}
-
-    middleware = SessionMiddleware(get_response=lambda x: x)
-    middleware.process_request(request)
-
-    view = OIDCAuthenticationRequestView()
-    extra_params = view.get_extra_params(request)
-
-    assert extra_params == (mocked_extra_params_setting or {})
-    assert not request.session.get("silent")
-
-
-@pytest.mark.parametrize("mocked_extra_params_setting", [{"foo": 123}, {}, None])
-def test_view_authentication_silent_true(settings, mocked_extra_params_setting):
-    """If 'silent' parameter is set to True, the silent login should be triggered."""
-    settings.OIDC_AUTH_REQUEST_EXTRA_PARAMS = mocked_extra_params_setting
-
-    user = factories.UserFactory()
-
-    request = RequestFactory().request()
-    request.user = user
-    request.GET = {"silent": "true"}
-
-    middleware = SessionMiddleware(get_response=lambda x: x)
-    middleware.process_request(request)
-
-    view = OIDCAuthenticationRequestView()
-    extra_params = view.get_extra_params(request)
-    expected_params = {"prompt": "none"}
-
-    assert (
-        extra_params == {**mocked_extra_params_setting, **expected_params}
-        if mocked_extra_params_setting
-        else expected_params
-    )
-    assert request.session.get("silent") is True
-
-
-@mock.patch.object(
-    MozillaOIDCAuthenticationCallbackView,
-    "failure_url",
-    new_callable=mock.PropertyMock,
-    return_value="foo",
-)
-def test_view_callback_failure_url(mocked_failure_url):
-    """Test default behavior of the 'failure_url' property"""
-
-    user = factories.UserFactory()
-
-    request = RequestFactory().request()
-    request.user = user
-
-    middleware = SessionMiddleware(get_response=lambda x: x)
-    middleware.process_request(request)
-
-    view = OIDCAuthenticationCallbackView()
-    view.request = request
-
-    returned_url = view.failure_url
-
-    mocked_failure_url.assert_called_once()
-    assert returned_url == "foo"
-
-
-@mock.patch.object(
-    OIDCAuthenticationCallbackView,
-    "success_url",
-    new_callable=mock.PropertyMock,
-    return_value="foo",
-)
-def test_view_callback_failure_url_silent_login(mocked_success_url):
-    """If a silent login was initiated and failed, it should not be treated as a failure."""
-
-    user = factories.UserFactory()
-
-    request = RequestFactory().request()
-    request.user = user
-
-    middleware = SessionMiddleware(get_response=lambda x: x)
-    middleware.process_request(request)
-
-    request.session["silent"] = True
-    request.session.save()
-
-    view = OIDCAuthenticationCallbackView()
-    view.request = request
-
-    returned_url = view.failure_url
-
-    mocked_success_url.assert_called_once()
-    assert returned_url == "foo"
-    assert not request.session.get("silent")

src/backend/core/tests/recording/event/test_notification.py

@@ -4,6 +4,7 @@ Test event notification.
 
 # pylint: disable=E1128,W0621,W0613,W0212
 
+import datetime
 import smtplib
 from unittest import mock
 
@@ -74,6 +75,7 @@ def test_notify_external_services_unknown_mode(caplog):
     assert f"Unknown recording mode unknown for recording {recording.id}" in caplog.text
 
 
+# pylint: disable=too-many-locals
 def test_notify_user_by_email_success(mocked_current_site, settings):
     """Test successful email notification to recording owners."""
     settings.EMAIL_BRAND_NAME = "ACME"
@@ -84,15 +86,28 @@ def test_notify_user_by_email_success(mocked_current_site, settings):
 
     recording = factories.RecordingFactory(room__name="Conference Room A")
 
-    owners = [
-        factories.UserRecordingAccessFactory(
-            recording=recording, role=models.RoleChoices.OWNER
-        ).user,
-        factories.UserRecordingAccessFactory(
-            recording=recording, role=models.RoleChoices.OWNER
-        ).user,
-    ]
-    owner_emails = [owner.email for owner in owners]
+    # Fix recording test to avoid flaky tests
+    recording.created_at = datetime.datetime(2023, 5, 15, 14, 30, 0)
+
+    french_user = factories.UserFactory(
+        email="franc@test.com", language="fr-fr", timezone="Europe/Paris"
+    )
+    dutch_user = factories.UserFactory(
+        email="berry@test.com", language="nl-nl", timezone="Europe/Amsterdam"
+    )
+    english_user = factories.UserFactory(
+        email="john@test.com", language="en-us", timezone="America/Phoenix"
+    )
+
+    factories.UserRecordingAccessFactory(
+        recording=recording, role=models.RoleChoices.OWNER, user=french_user
+    )
+    factories.UserRecordingAccessFactory(
+        recording=recording, role=models.RoleChoices.OWNER, user=dutch_user
+    )
+    factories.UserRecordingAccessFactory(
+        recording=recording, role=models.RoleChoices.OWNER, user=english_user
+    )
 
     # Create non-owner users to verify they don't receive emails
     factories.UserRecordingAccessFactory(
@@ -108,30 +123,69 @@ def test_notify_user_by_email_success(mocked_current_site, settings):
         result = notification_service._notify_user_by_email(recording)
 
         assert result is True
-        mock_send_mail.assert_called_once()
+        assert mock_send_mail.call_count == 3
 
-        subject, body, sender, recipients = mock_send_mail.call_args[0]
+        call_args_list = mock_send_mail.call_args_list
 
-        assert subject == "Your recording is ready"
-
-        # Verify email contains expected content
-        required_content = [
+        base_content = [
             "ACME",  # Brand name
             "support@acme.com",  # Support email
             "https://acme.com/logo",  # Logo URL
             f"https://acme.com/recordings/{recording.id}",  # Recording link
             "Conference Room A",  # Room name
-            recording.created_at.strftime("%A %d %B %Y"),  # Formatted date
-            recording.created_at.strftime("%H:%M"),  # Formatted time
         ]
 
-        for content in required_content:
-            assert content in body
+        # First call verification
+        subject1, body1, sender1, recipients1 = call_args_list[0][0]
+        assert subject1 == "Votre enregistrement est prêt"
 
-        assert sender == "notifications@acme.com"
+        # Verify email contains expected content
+        personalized_content1 = [
+            *base_content,
+            "2023-05-15",  # Formatted date
+            "16:30",  # Formatted time
+            "Votre enregistrement est prêt !",  # Intro
+        ]
+        for content in personalized_content1:
+            assert content in body1
 
-        # Verify all owners received the email (order-independent comparison)
-        assert sorted(recipients) == sorted(owner_emails)
+        assert recipients1 == ["franc@test.com"]
+        assert sender1 == "notifications@acme.com"
+
+        # Second call verification
+        subject2, body2, sender2, recipients2 = call_args_list[1][0]
+        assert subject2 == "Je opname is klaar"
+
+        # Verify second email content (if needed)
+        personalized_content2 = [
+            *base_content,
+            "2023-05-15",  # Formatted date
+            "16:30",  # Formatted time
+            "Je opname is klaar!",  # Intro
+        ]
+        for content in personalized_content2:
+            assert content in body2
+
+        assert recipients2 == ["berry@test.com"]
+        assert sender2 == "notifications@acme.com"
+
+        # Third call verification
+        subject3, body3, sender3, recipients3 = call_args_list[2][0]
+        assert subject3 == "Your recording is ready"
+
+        # Verify second email content (if needed)
+        personalized_content3 = [
+            *base_content,
+            "Conference Room A",  # Room name
+            "2023-05-15",  # Formatted date
+            "07:30",  # Formatted time
+            "Your recording is ready!",  # Intro
+        ]
+        for content in personalized_content3:
+            assert content in body3
+
+        assert recipients3 == ["john@test.com"]
+        assert sender3 == "notifications@acme.com"
 
 
 def test_notify_user_by_email_no_owners(mocked_current_site, caplog):
@@ -150,9 +204,12 @@ def test_notify_user_by_email_smtp_exception(mocked_current_site, caplog):
     """Test email notification when an exception occurs."""
 
     recording = factories.RecordingFactory(room__name="Conference Room A")
-    owner = factories.UserRecordingAccessFactory(
+    factories.UserRecordingAccessFactory(
         recording=recording, role=models.RoleChoices.OWNER
-    ).user
+    )
+    factories.UserRecordingAccessFactory(
+        recording=recording, role=models.RoleChoices.OWNER
+    )
 
     notification_service = NotificationService()
 
@@ -163,5 +220,5 @@ def test_notify_user_by_email_smtp_exception(mocked_current_site, caplog):
         result = notification_service._notify_user_by_email(recording)
 
         assert result is False
-        mock_send_mail.assert_called_once()
-        assert f"notification to ['{owner.email}'] was not sent" in caplog.text
+        assert mock_send_mail.call_count == 2
+        assert "notification could not be sent:" in caplog.text

src/backend/core/tests/recording/test_api_recordings_list.py

@@ -47,11 +47,12 @@ def test_api_recordings_list_authenticated_no_recording():
     "role",
     ["administrator", "member", "owner"],
 )
-def test_api_recordings_list_authenticated_direct(role):
+def test_api_recordings_list_authenticated_direct(role, settings):
     """
     Authenticated users listing recordings, should only see the recordings
     to which they are related.
     """
+    settings.RECORDING_EXPIRATIONS_DAYS = None
     user = factories.UserFactory()
     client = APIClient()
     client.force_login(user)
@@ -78,6 +79,7 @@ def test_api_recordings_list_authenticated_direct(role):
     assert expected_ids == result_ids
     assert results[0] == {
         "id": str(recording.id),
+        "key": recording.key,
         "created_at": recording.created_at.isoformat().replace("+00:00", "Z"),
         "mode": recording.mode,
         "room": {
@@ -88,6 +90,8 @@ def test_api_recordings_list_authenticated_direct(role):
         },
         "status": "initiated",
         "updated_at": recording.updated_at.isoformat().replace("+00:00", "Z"),
+        "expired_at": None,
+        "is_expired": False,
     }
 
 

src/backend/core/tests/recording/test_api_recordings_media_auth.py

@@ -20,7 +20,7 @@ from core.factories import RecordingFactory, UserFactory, UserRecordingAccessFac
 pytestmark = pytest.mark.django_db
 
 
-def test_api_documents_media_auth_unauthenticated():
+def test_api_recordings_media_auth_unauthenticated():
     """
     Test that unauthenticated requests to download media are rejected
     """
@@ -33,7 +33,7 @@ def test_api_documents_media_auth_unauthenticated():
     assert response.status_code == 401
 
 
-def test_api_documents_media_auth_wrong_path():
+def test_api_recordings_media_auth_wrong_path():
     """
     Test that media URLs with incorrect path structures are rejected
     """
@@ -51,7 +51,7 @@ def test_api_documents_media_auth_wrong_path():
     assert response.status_code == 403
 
 
-def test_api_documents_media_auth_unknown_recording():
+def test_api_recordings_media_auth_unknown_recording():
     """
     Test that requests for non-existent recordings are properly handled
     """
@@ -69,7 +69,7 @@ def test_api_documents_media_auth_unknown_recording():
     assert response.status_code == 404
 
 
-def test_api_documents_media_auth_no_abilities():
+def test_api_recordings_media_auth_no_abilities():
     """
     Test that users without any access permissions cannot download recordings
     """
@@ -88,7 +88,7 @@ def test_api_documents_media_auth_no_abilities():
     assert response.status_code == 403
 
 
-def test_api_documents_media_auth_wrong_abilities():
+def test_api_recordings_media_auth_wrong_abilities():
     """
     Test that users with insufficient role permissions cannot download recordings
     """
@@ -111,7 +111,7 @@ def test_api_documents_media_auth_wrong_abilities():
 
 
 @pytest.mark.parametrize("wrong_status", ["initiated", "active", "failed_to_stop"])
-def test_api_documents_media_auth_unsaved(wrong_status):
+def test_api_recordings_media_auth_unsaved(wrong_status):
     """
     Test that recordings that aren't in 'saved' status cannot be downloaded
     """
@@ -132,7 +132,7 @@ def test_api_documents_media_auth_unsaved(wrong_status):
     assert response.status_code == 403
 
 
-def test_api_documents_media_auth_mismatched_extension():
+def test_api_recordings_media_auth_mismatched_extension():
     """
     Test that requests with mismatched file extensions are rejected
     """
@@ -160,7 +160,7 @@ def test_api_documents_media_auth_mismatched_extension():
 @pytest.mark.parametrize(
     "wrong_extension", ["jpg", "txt", "mp3"], ids=["image", "text", "audio"]
 )
-def test_api_documents_media_auth_wrong_extension(wrong_extension):
+def test_api_recordings_media_auth_wrong_extension(wrong_extension):
     """
     Trying to download a recording with an unsupported extension should return
     a validation error (400) with details about allowed extensions.
@@ -185,7 +185,7 @@ def test_api_documents_media_auth_wrong_extension(wrong_extension):
 
 
 @pytest.mark.parametrize("mode", ["screen_recording", "transcript"])
-def test_api_documents_media_auth_success_owner(mode):
+def test_api_recordings_media_auth_success_owner(mode):
     """
     Test downloading a recording when logged in and authorized.
     Verifies S3 authentication headers and successful file retrieval.
@@ -235,7 +235,7 @@ def test_api_documents_media_auth_success_owner(mode):
 
 
 @pytest.mark.parametrize("mode", ["screen_recording", "transcript"])
-def test_api_documents_media_auth_success_administrator(mode):
+def test_api_recordings_media_auth_success_administrator(mode):
     """
     Test downloading a recording when logged in and authorized.
     Verifies S3 authentication headers and successful file retrieval.

src/backend/core/tests/recording/test_api_recordings_retrieve.py

@@ -2,7 +2,10 @@
 Test recordings API endpoints in the Meet core app: retrieve.
 """
 
+import random
+
 import pytest
+from freezegun import freeze_time
 from rest_framework.test import APIClient
 
 from ...factories import RecordingFactory, UserFactory, UserRecordingAccessFactory
@@ -61,8 +64,9 @@ def test_api_recording_retrieve_members():
     }
 
 
-def test_api_recording_retrieve_administrators():
+def test_api_recording_retrieve_administrators(settings):
     """A user who is an administrator of a recording should be able to retrieve it."""
+    settings.RECORDING_EXPIRATION_DAYS = None
 
     user = UserFactory()
     recording = RecordingFactory()
@@ -80,6 +84,7 @@ def test_api_recording_retrieve_administrators():
 
     assert content == {
         "id": str(recording.id),
+        "key": recording.key,
         "room": {
             "access_level": str(room.access_level),
             "id": str(room.id),
@@ -90,11 +95,14 @@ def test_api_recording_retrieve_administrators():
         "updated_at": recording.updated_at.isoformat().replace("+00:00", "Z"),
         "status": str(recording.status),
         "mode": str(recording.mode),
+        "expired_at": None,
+        "is_expired": False,
     }
 
 
-def test_api_recording_retrieve_owners():
+def test_api_recording_retrieve_owners(settings):
     """A user who is an owner of a recording should be able to retrieve it."""
+    settings.RECORDING_EXPIRATION_DAYS = None
     user = UserFactory()
     recording = RecordingFactory()
 
@@ -111,6 +119,7 @@ def test_api_recording_retrieve_owners():
 
     assert content == {
         "id": str(recording.id),
+        "key": recording.key,
         "room": {
             "access_level": str(room.access_level),
             "id": str(room.id),
@@ -121,6 +130,87 @@ def test_api_recording_retrieve_owners():
         "updated_at": recording.updated_at.isoformat().replace("+00:00", "Z"),
         "status": str(recording.status),
         "mode": str(recording.mode),
+        "expired_at": None,
+        "is_expired": False,
+    }
+
+
+@freeze_time("2023-01-15 12:00:00")
+def test_api_recording_retrieve_compute_expiration_date_correctly(settings):
+    """Test that the API returns the correct expiration date for a non-expired recording."""
+    settings.RECORDING_EXPIRATION_DAYS = 1
+
+    user = UserFactory()
+    recording = RecordingFactory()
+
+    UserRecordingAccessFactory(
+        recording=recording, user=user, role=random.choice(["administrator", "owner"])
+    )
+
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.get(f"/api/v1.0/recordings/{recording.id!s}/")
+
+    assert response.status_code == 200
+    content = response.json()
+    room = recording.room
+
+    assert content == {
+        "id": str(recording.id),
+        "key": recording.key,
+        "room": {
+            "access_level": str(room.access_level),
+            "id": str(room.id),
+            "name": room.name,
+            "slug": room.slug,
+        },
+        "created_at": "2023-01-15T12:00:00Z",
+        "updated_at": "2023-01-15T12:00:00Z",
+        "status": str(recording.status),
+        "mode": str(recording.mode),
+        "expired_at": "2023-01-16T12:00:00Z",
+        "is_expired": False,  # Ensure the recording is still valid and hasn't expired
+    }
+
+
+def test_api_recording_retrieve_expired(settings):
+    """Test that the API returns the correct expiration date and flag for an expired recording."""
+    settings.RECORDING_EXPIRATION_DAYS = 2
+
+    user = UserFactory()
+
+    with freeze_time("2023-01-15 12:00:00"):
+        recording = RecordingFactory()
+
+    UserRecordingAccessFactory(
+        recording=recording, user=user, role=random.choice(["administrator", "owner"])
+    )
+
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.get(f"/api/v1.0/recordings/{recording.id!s}/")
+
+    assert response.status_code == 200
+    content = response.json()
+    room = recording.room
+
+    assert content == {
+        "id": str(recording.id),
+        "key": recording.key,
+        "room": {
+            "access_level": str(room.access_level),
+            "id": str(room.id),
+            "name": room.name,
+            "slug": room.slug,
+        },
+        "created_at": "2023-01-15T12:00:00Z",
+        "updated_at": "2023-01-15T12:00:00Z",
+        "status": str(recording.status),
+        "mode": str(recording.mode),
+        "expired_at": "2023-01-17T12:00:00Z",
+        "is_expired": True,  # Ensure the recording has expired
     }
 
 

src/backend/core/tests/recording/worker/test_factories.py

@@ -32,7 +32,6 @@ def test_settings():
     mocked_settings = {
         "RECORDING_OUTPUT_FOLDER": "/test/output",
         "LIVEKIT_CONFIGURATION": {"server": "test.example.com"},
-        "RECORDING_VERIFY_SSL": True,
         "AWS_S3_ENDPOINT_URL": "https://s3.test.com",
         "AWS_S3_ACCESS_KEY_ID": "test_key",
         "AWS_S3_SECRET_ACCESS_KEY": "test_secret",
@@ -56,7 +55,6 @@ def test_config_initialization(default_config):
     """Test that WorkerServiceConfig is properly initialized from settings"""
     assert default_config.output_folder == "/test/output"
     assert default_config.server_configurations == {"server": "test.example.com"}
-    assert default_config.verify_ssl is True
     assert default_config.bucket_args == {
         "endpoint": "https://s3.test.com",
         "access_key": "test_key",
@@ -76,7 +74,6 @@ def test_config_immutability(default_config):
 @override_settings(
     RECORDING_OUTPUT_FOLDER="/test/output",
     LIVEKIT_CONFIGURATION={"server": "test.example.com"},
-    RECORDING_VERIFY_SSL=True,
     AWS_S3_ENDPOINT_URL="https://s3.test.com",
     AWS_S3_ACCESS_KEY_ID="test_key",
     AWS_S3_SECRET_ACCESS_KEY="test_secret",

src/backend/core/tests/recording/worker/test_services.py

@@ -6,10 +6,9 @@ Test worker service classes.
 
 from unittest.mock import AsyncMock, Mock, patch
 
-import aiohttp
 import pytest
 
-from core.recording.worker.exceptions import WorkerConnectionError, WorkerResponseError
+from core.recording.worker.exceptions import WorkerResponseError
 from core.recording.worker.factories import WorkerServiceConfig
 from core.recording.worker.services import (
     AudioCompositeEgressService,
@@ -25,11 +24,10 @@ def config():
     return WorkerServiceConfig(
         output_folder="/test/output",
         server_configurations={
-            "host": "test.livekit.io",
+            "url": "test.livekit.io",
             "api_key": "test_key",
             "api_secret": "test_secret",
         },
-        verify_ssl=True,
         bucket_args={
             "endpoint": "https://s3.test.com",
             "access_key": "test_key",
@@ -127,58 +125,6 @@ def test_base_egress_filepath_construction(service, filename, extension, expecte
     assert result.endswith(f"{filename}.{extension}")
 
 
-def test_base_egress_handle_request_success(
-    config, service, mock_client_session, mock_egress_service, mock_tcp_connector
-):
-    """Test successful request handling"""
-    # Setup mock response
-    mock_response = Mock()
-    mock_method = AsyncMock(return_value=mock_response)
-    mock_egress_instance = Mock()
-    mock_egress_instance.test_method = mock_method
-    mock_egress_service.return_value = mock_egress_instance
-
-    # Create test request
-    test_request = Mock()
-
-    response = service._handle_request(test_request, "test_method")
-
-    mock_client_session.assert_called_once_with(
-        connector=mock_tcp_connector.return_value
-    )
-
-    # Verify EgressService initialization
-    mock_egress_service.assert_called_once_with(
-        mock_client_session.return_value.__aenter__.return_value,
-        **service._config.server_configurations,
-    )
-
-    # Verify method call and response
-    mock_method.assert_called_once_with(test_request)
-    assert response == mock_response
-
-
-def test_base_egress_handle_request_connection_error(service, mock_egress_service):
-    """Test handling of connection errors"""
-    # Setup mock error
-    mock_method = AsyncMock(
-        side_effect=livekit_api.TwirpError(msg="Connection failed", code=500)
-    )
-    mock_egress_instance = Mock()
-    mock_egress_instance.test_method = mock_method
-    mock_egress_service.return_value = mock_egress_instance
-
-    # Create test request
-    test_request = Mock()
-
-    # Verify error handling
-    with pytest.raises(WorkerConnectionError) as exc:
-        service._handle_request(test_request, "test_method")
-
-    assert "LiveKit client connection error" in str(exc.value)
-    assert "Connection failed" in str(exc.value)
-
-
 @pytest.mark.parametrize(
     "response_status,expected_result",
     [
@@ -224,43 +170,6 @@ def test_base_egress_start_not_implemented(service):
     assert "Subclass must implement this method" in str(exc.value)
 
 
-@pytest.mark.parametrize("verify_ssl", [True, False])
-def test_base_egress_ssl_verification_config(verify_ssl):
-    """Test SSL verification configuration"""
-    config = WorkerServiceConfig(
-        output_folder="/test/output",
-        server_configurations={
-            "host": "test.livekit.io",
-            "api_key": "test_key",
-            "api_secret": "test_secret",
-        },
-        verify_ssl=verify_ssl,
-        bucket_args={
-            "endpoint": "https://s3.test.com",
-            "access_key": "test_key",
-            "secret": "test_secret",
-            "region": "test-region",
-            "bucket": "test-bucket",
-            "force_path_style": True,
-        },
-    )
-
-    service = BaseEgressService(config)
-
-    # Mock ClientSession to capture connector configuration
-    with patch("aiohttp.ClientSession") as mock_session:
-        mock_session.return_value.__aenter__ = AsyncMock()
-        mock_session.return_value.__aexit__ = AsyncMock()
-
-        # Trigger request to verify connector configuration
-        service._handle_request(Mock(), "test_method")
-
-        # Verify SSL configuration
-        connector = mock_session.call_args[1]["connector"]
-        assert isinstance(connector, aiohttp.TCPConnector)
-        assert connector._ssl == verify_ssl
-
-
 def test_video_composite_egress_hrid(video_service):
     """Test HRID is correct"""
     assert video_service.hrid == "video-recording-composite-livekit-egress"

src/backend/core/tests/rooms/test_api_rooms_invite.py

@@ -0,0 +1,295 @@
+"""
+Test rooms API endpoints in the Meet core app: invite.
+"""
+
+# pylint: disable=W0621,W0613
+
+import json
+import random
+from unittest import mock
+
+import pytest
+from rest_framework.test import APIClient
+
+from ...factories import RoomFactory, UserFactory
+from ...services.invitation import InvitationError, InvitationService
+
+pytestmark = pytest.mark.django_db
+
+
+def test_api_rooms_invite_anonymous():
+    """Test anonymous users should not be allowed to invite people to rooms."""
+
+    client = APIClient()
+    room = RoomFactory()
+
+    data = {"emails": ["toto@yopmail.com"]}
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/invite/",
+        json.dumps(data),
+        content_type="application/json",
+    )
+
+    assert response.status_code == 401
+
+
+def test_api_rooms_invite_no_access():
+    """Test non-privileged users should not be allowed to invite people to rooms."""
+
+    client = APIClient()
+    room = RoomFactory()
+
+    user = UserFactory()
+    client.force_login(user)
+
+    data = {"emails": ["toto@yopmail.com"]}
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/invite/",
+        json.dumps(data),
+        content_type="application/json",
+    )
+
+    assert response.status_code == 403
+    assert response.json() == {
+        "detail": "You must have privileges on room to perform this action.",
+    }
+
+
+def test_api_rooms_invite_member():
+    """Test member users should not be allowed to invite people to rooms."""
+
+    client = APIClient()
+    room = RoomFactory()
+
+    user = UserFactory()
+    client.force_login(user)
+
+    room.accesses.create(user=user, role="member")
+
+    data = {"emails": ["toto@yopmail.com"]}
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/invite/",
+        json.dumps(data),
+        content_type="application/json",
+    )
+
+    assert response.status_code == 403
+    assert response.json() == {
+        "detail": "You must have privileges on room to perform this action.",
+    }
+
+
+def test_api_rooms_invite_missing_emails():
+    """Test missing email list should return validation error."""
+
+    client = APIClient()
+    room = RoomFactory()
+    user = UserFactory()
+
+    room.accesses.create(user=user, role=random.choice(["administrator", "owner"]))
+
+    client.force_login(user)
+
+    data = {"foo": []}
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/invite/",
+        json.dumps(data),
+        content_type="application/json",
+    )
+
+    assert response.status_code == 400
+    assert response.json() == {
+        "emails": [
+            "This field is required.",
+        ]
+    }
+
+
+def test_api_rooms_invite_empty_emails():
+    """Test empty email list should return validation error."""
+
+    client = APIClient()
+    room = RoomFactory()
+    user = UserFactory()
+
+    room.accesses.create(user=user, role=random.choice(["administrator", "owner"]))
+
+    client.force_login(user)
+
+    data = {"emails": []}
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/invite/",
+        json.dumps(data),
+        content_type="application/json",
+    )
+
+    assert response.status_code == 400
+    assert response.json() == {
+        "emails": [
+            "This list may not be empty.",
+        ]
+    }
+
+
+def test_api_rooms_invite_invalid_emails():
+    """Test invalid email addresses should return validation errors."""
+
+    client = APIClient()
+    room = RoomFactory()
+    user = UserFactory()
+
+    room.accesses.create(user=user, role=random.choice(["administrator", "owner"]))
+
+    client.force_login(user)
+
+    data = {"emails": ["abdc", "efg"]}
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/invite/",
+        json.dumps(data),
+        content_type="application/json",
+    )
+
+    assert response.status_code == 400
+    assert response.json() == {
+        "emails": {
+            "0": ["Enter a valid email address."],
+            "1": ["Enter a valid email address."],
+        }
+    }
+
+
+def test_api_rooms_invite_partially_invalid_emails():
+    """Test partially invalid email addresses should return validation errors."""
+
+    client = APIClient()
+    room = RoomFactory()
+    user = UserFactory()
+
+    room.accesses.create(user=user, role=random.choice(["administrator", "owner"]))
+
+    client.force_login(user)
+
+    data = {"emails": ["fabrice@yopmail.com", "efg"]}
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/invite/",
+        json.dumps(data),
+        content_type="application/json",
+    )
+
+    assert response.status_code == 400
+    assert response.json() == {
+        "emails": {
+            "1": ["Enter a valid email address."],
+        }
+    }
+
+
+@mock.patch.object(InvitationService, "invite_to_room")
+def test_api_rooms_invite_duplicates(mock_invite_to_room):
+    """Test duplicate emails should be deduplicated before processing."""
+
+    client = APIClient()
+    room = RoomFactory()
+    user = UserFactory()
+
+    room.accesses.create(user=user, role=random.choice(["administrator", "owner"]))
+
+    client.force_login(user)
+
+    data = {"emails": ["toto@yopmail.com", "toto@yopmail.com", "Toto@yopmail.com"]}
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/invite/",
+        json.dumps(data),
+        content_type="application/json",
+    )
+
+    assert response.status_code == 200
+    mock_invite_to_room.assert_called_once()
+
+    _, kwargs = mock_invite_to_room.call_args
+
+    assert kwargs["room"] == room
+    assert kwargs["sender"] == user
+    assert sorted(kwargs["emails"]) == sorted(["Toto@yopmail.com", "toto@yopmail.com"])
+
+
+@mock.patch.object(InvitationService, "invite_to_room", side_effect=InvitationError())
+def test_api_rooms_invite_error(mock_invite_to_room):
+    """Test invitation service error should return appropriate error response."""
+
+    client = APIClient()
+    room = RoomFactory()
+    user = UserFactory()
+
+    room.accesses.create(user=user, role=random.choice(["administrator", "owner"]))
+
+    client.force_login(user)
+
+    data = {"emails": ["toto@yopmail.com", "toto@yopmail.com"]}
+
+    with pytest.raises(InvitationError) as excinfo:
+        client.post(
+            f"/api/v1.0/rooms/{room.id}/invite/",
+            json.dumps(data),
+            content_type="application/json",
+        )
+
+        mock_invite_to_room.assert_called_once()
+        assert "Could not send invitation" in str(excinfo.value)
+
+
+@mock.patch("core.services.invitation.send_mail")
+def test_api_rooms_invite_success(mock_send_mail, settings):
+    """Test privileged users should successfully send invitation emails."""
+
+    settings.EMAIL_BRAND_NAME = "ACME"
+    settings.EMAIL_LOGO_IMG = "https://acme.com/logo"
+    settings.EMAIL_APP_BASE_URL = "https://acme.com"
+    settings.EMAIL_FROM = "notifications@acme.com"
+    settings.EMAIL_DOMAIN = "acme.com"
+
+    client = APIClient()
+    room = RoomFactory()
+    user = UserFactory()
+
+    room.accesses.create(user=user, role=random.choice(["administrator", "owner"]))
+
+    client.force_login(user)
+
+    data = {"emails": ["fabien@yopmail.com", "gerald@yopmail.com"]}
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/invite/",
+        json.dumps(data),
+        content_type="application/json",
+    )
+
+    assert response.status_code == 200
+    assert response.json() == {"status": "success", "message": "invitations sent"}
+
+    mock_send_mail.assert_called_once()
+
+    subject, body, sender, recipients = mock_send_mail.call_args[0]
+
+    assert (
+        subject == f"Video call in progress: {user.email} is waiting for you to connect"
+    )
+
+    # Verify email contains expected content
+    required_content = [
+        "ACME",  # Brand name
+        "https://acme.com/logo",  # Logo URL
+        f"https://acme.com/{room.slug}",  # Room url
+        f"acme.com/{room.slug}",  # Room link
+    ]
+
+    for content in required_content:
+        assert content in body
+
+    assert sender == "notifications@acme.com"
+
+    # Verify all owners received the email (order-independent comparison)
+    assert sorted(recipients) == sorted(["fabien@yopmail.com", "gerald@yopmail.com"])

src/backend/core/tests/rooms/test_api_rooms_retrieve.py

@@ -336,23 +336,22 @@ def test_api_rooms_retrieve_authenticated():
         "url": "test_url_value",
     }
 )
-def test_api_rooms_retrieve_members(mock_token, django_assert_num_queries):
+def test_api_rooms_retrieve_members(mock_token, django_assert_num_queries, settings):
     """
-    Users who are members of a room should be allowed to see related users.
+    Users who are members of a room should not be allowed to see related users.
     """
+    settings.TIME_ZONE = "UTC"
     user = UserFactory()
     other_user = UserFactory()
 
     room = RoomFactory()
-    user_access = UserResourceAccessFactory(resource=room, user=user, role="member")
-    other_user_access = UserResourceAccessFactory(
-        resource=room, user=other_user, role="member"
-    )
+    UserResourceAccessFactory(resource=room, user=user, role="member")
+    UserResourceAccessFactory(resource=room, user=other_user, role="member")
 
     client = APIClient()
     client.force_login(user)
 
-    with django_assert_num_queries(4):
+    with django_assert_num_queries(3):
         response = client.get(
             f"/api/v1.0/rooms/{room.id!s}/",
         )
@@ -360,33 +359,7 @@ def test_api_rooms_retrieve_members(mock_token, django_assert_num_queries):
     assert response.status_code == 200
     content_dict = response.json()
 
-    assert sorted(content_dict.pop("accesses"), key=lambda x: x["id"]) == sorted(
-        [
-            {
-                "id": str(user_access.id),
-                "user": {
-                    "id": str(user_access.user.id),
-                    "email": user_access.user.email,
-                    "full_name": user_access.user.full_name,
-                    "short_name": user_access.user.short_name,
-                },
-                "resource": str(room.id),
-                "role": user_access.role,
-            },
-            {
-                "id": str(other_user_access.id),
-                "user": {
-                    "id": str(other_user_access.user.id),
-                    "email": other_user_access.user.email,
-                    "full_name": other_user_access.user.full_name,
-                    "short_name": other_user_access.user.short_name,
-                },
-                "resource": str(room.id),
-                "role": other_user_access.role,
-            },
-        ],
-        key=lambda x: x["id"],
-    )
+    assert "accesses" not in content_dict
 
     expected_name = str(room.id)
     assert content_dict == {
@@ -415,11 +388,14 @@ def test_api_rooms_retrieve_members(mock_token, django_assert_num_queries):
         "url": "test_url_value",
     }
 )
-def test_api_rooms_retrieve_administrators(mock_token, django_assert_num_queries):
+def test_api_rooms_retrieve_administrators(
+    mock_token, django_assert_num_queries, settings
+):
     """
     A user who is an administrator or owner of a room should be allowed
     to see related users.
     """
+    settings.TIME_ZONE = "UTC"
     user = UserFactory()
     other_user = UserFactory()
     room = RoomFactory()
@@ -448,6 +424,8 @@ def test_api_rooms_retrieve_administrators(mock_token, django_assert_num_queries
                     "email": other_user_access.user.email,
                     "full_name": other_user_access.user.full_name,
                     "short_name": other_user_access.user.short_name,
+                    "timezone": "UTC",
+                    "language": other_user_access.user.language,
                 },
                 "resource": str(room.id),
                 "role": other_user_access.role,
@@ -459,6 +437,8 @@ def test_api_rooms_retrieve_administrators(mock_token, django_assert_num_queries
                     "email": user_access.user.email,
                     "full_name": user_access.user.full_name,
                     "short_name": user_access.user.short_name,
+                    "timezone": "UTC",
+                    "language": user_access.user.language,
                 },
                 "resource": str(room.id),
                 "role": user_access.role,

src/backend/core/tests/services/test_lobby.py

@@ -776,9 +776,10 @@ def test_update_participant_status_success(mock_cache, lobby_service, participan
     lobby_service._get_cache_key.assert_called_once_with(room.id, participant_id)
 
 
-@mock.patch("core.services.lobby.LiveKitAPI")
-def test_notify_participants_success_no_room(mock_livekit_api, lobby_service):
+@mock.patch("core.utils.create_livekit_client")
+def test_notify_participants_success_no_room(mock_create_livekit_client, lobby_service):
     """Test the notify_participants method when the LiveKit room doesn't exist yet."""
+
     room = RoomFactory(access_level=RoomAccessLevel.RESTRICTED)
 
     # Set up the mock LiveKitAPI and its behavior
@@ -794,15 +795,11 @@ def test_notify_participants_success_no_room(mock_livekit_api, lobby_service):
 
     mock_api_instance.room.list_rooms = mock.AsyncMock(return_value=MockResponse())
     mock_api_instance.aclose = mock.AsyncMock()
-    mock_livekit_api.return_value = mock_api_instance
+    mock_create_livekit_client.return_value = mock_api_instance
 
     # Act
     lobby_service.notify_participants(room.id)
 
-    # Assert
-    # Verify the API was initialized with correct configuration
-    mock_livekit_api.assert_called_once_with(**settings.LIVEKIT_CONFIGURATION)
-
     # Verify that the service checked for existing rooms
     mock_api_instance.room.list_rooms.assert_called_once()
 
@@ -813,8 +810,8 @@ def test_notify_participants_success_no_room(mock_livekit_api, lobby_service):
     mock_api_instance.aclose.assert_called_once()
 
 
-@mock.patch("core.services.lobby.LiveKitAPI")
-def test_notify_participants_success(mock_livekit_api, lobby_service):
+@mock.patch("core.utils.create_livekit_client")
+def test_notify_participants_success(mock_create_livekit_client, lobby_service):
     """Test successful participant notification."""
     room = RoomFactory(access_level=RoomAccessLevel.RESTRICTED)
     # Set up the mock LiveKitAPI and its behavior
@@ -830,14 +827,11 @@ def test_notify_participants_success(mock_livekit_api, lobby_service):
     mock_api_instance.room.list_rooms = mock.AsyncMock(return_value=MockResponse())
 
     mock_api_instance.aclose = mock.AsyncMock()
-    mock_livekit_api.return_value = mock_api_instance
+    mock_create_livekit_client.return_value = mock_api_instance
 
     # Call the function
     lobby_service.notify_participants(room.id)
 
-    # Verify the API was called correctly
-    mock_livekit_api.assert_called_once_with(**settings.LIVEKIT_CONFIGURATION)
-
     # Verify that the service checked for existing rooms
     mock_api_instance.room.list_rooms.assert_called_once()
 
@@ -855,15 +849,15 @@ def test_notify_participants_success(mock_livekit_api, lobby_service):
     mock_api_instance.aclose.assert_called_once()
 
 
-@mock.patch("core.services.lobby.LiveKitAPI")
-def test_notify_participants_error(mock_livekit_api, lobby_service):
+@mock.patch("core.utils.create_livekit_client")
+def test_notify_participants_error(mock_create_livekit_client, lobby_service):
     """Test participant notification with API error."""
     room = RoomFactory(access_level=RoomAccessLevel.RESTRICTED)
     # Set up the mock LiveKitAPI and its behavior
     mock_api_instance = mock.Mock()
     mock_api_instance.room = mock.Mock()
     mock_api_instance.room.send_data = mock.AsyncMock(
-        side_effect=TwirpError(msg="test error", code=123)
+        side_effect=TwirpError(msg="test error", code=123, status=123)
     )
 
     class MockResponse:
@@ -874,7 +868,7 @@ def test_notify_participants_error(mock_livekit_api, lobby_service):
     mock_api_instance.room.list_rooms = mock.AsyncMock(return_value=MockResponse())
 
     mock_api_instance.aclose = mock.AsyncMock()
-    mock_livekit_api.return_value = mock_api_instance
+    mock_create_livekit_client.return_value = mock_api_instance
 
     # Call the function and expect an exception
     with pytest.raises(
@@ -882,9 +876,6 @@ def test_notify_participants_error(mock_livekit_api, lobby_service):
     ):
         lobby_service.notify_participants(room.id)
 
-    # Verify the API was called correctly
-    mock_livekit_api.assert_called_once_with(**settings.LIVEKIT_CONFIGURATION)
-
     # Verify that the service checked for existing rooms
     mock_api_instance.room.list_rooms.assert_called_once()
 

src/backend/core/tests/test_api_users.py

@@ -103,8 +103,10 @@ def test_api_users_retrieve_me_anonymous():
     }
 
 
-def test_api_users_retrieve_me_authenticated():
+def test_api_users_retrieve_me_authenticated(settings):
     """Authenticated users should be able to retrieve their own user via the "/users/me" path."""
+
+    settings.TIME_ZONE = "UTC"
     user = factories.UserFactory()
 
     client = APIClient()
@@ -121,6 +123,8 @@ def test_api_users_retrieve_me_authenticated():
         "email": user.email,
         "full_name": user.full_name,
         "short_name": user.short_name,
+        "language": user.language,
+        "timezone": "UTC",
     }
 
 

src/backend/core/tests/test_models_recording.py

@@ -256,10 +256,13 @@ def test_models_recording_key_for_unknown_mode(settings):
 
 
 def test_models_recording_is_saved_true():
-    """Test is_saved property returns True for SAVED status."""
+    """Test is_saved property returns True for SAVED and NOTIFICATION_SUCCEEDED status."""
     recording = RecordingFactory(status=RecordingStatusChoices.SAVED)
     assert recording.is_saved is True
 
+    recording = RecordingFactory(status=RecordingStatusChoices.NOTIFICATION_SUCCEEDED)
+    assert recording.is_saved is True
+
 
 def test_models_recording_is_saved_false_active():
     """Test is_saved property returns False for ACTIVE status."""

src/backend/core/tests/test_models_rooms.py

@@ -2,6 +2,12 @@
 Unit tests for the Room model
 """
 
+# pylint: disable=W0613
+
+import secrets
+from logging import Logger
+from unittest import mock
+
 from django.contrib.auth.models import AnonymousUser
 from django.core.exceptions import ValidationError
 
@@ -175,3 +181,169 @@ def test_models_rooms_is_public_property():
     # Test non-public room
     private_room = RoomFactory(access_level=RoomAccessLevel.RESTRICTED)
     assert private_room.is_public is False
+
+
+@mock.patch.object(Room, "generate_unique_pin_code")
+def test_telephony_disabled_skips_pin_generation(
+    mock_generate_unique_pin_code, settings
+):
+    """Telephony disabled should not generate pin codes."""
+
+    settings.ROOM_TELEPHONY_ENABLED = False
+
+    room = RoomFactory()
+
+    mock_generate_unique_pin_code.assert_not_called()
+    assert room.pin_code is None
+
+
+def test_default_and_custom_pin_length(settings):
+    """Pin codes should be created with correct configured length."""
+
+    settings.ROOM_TELEPHONY_ENABLED = True
+
+    room = RoomFactory()
+
+    # Assert default value is 10 for collision reasons
+    assert len(room.pin_code) == 10
+
+    settings.ROOM_TELEPHONY_PIN_LENGTH = 5
+
+    room = RoomFactory()
+
+    # Assert custom size
+    assert len(room.pin_code) == 5
+
+
+def test_room_updates_preserve_pin_code(settings):
+    """Room updates should preserve existing pin code."""
+
+    settings.ROOM_TELEPHONY_ENABLED = True
+
+    room = RoomFactory()
+
+    # Store the original pin code to compare after updates
+    previous_pin_code = room.pin_code
+
+    # If this method is called, it would indicate the pin is being regenerated unnecessarily
+    with mock.patch.object(
+        Room, "generate_unique_pin_code"
+    ) as mock_generate_unique_pin_code:
+        # Explicitly call save to persist the changes to the room
+        room.slug = "aaa-aaaa-aaa"
+        room.save()
+        assert room.pin_code == previous_pin_code
+        mock_generate_unique_pin_code.assert_not_called()
+
+
+@pytest.mark.parametrize("is_telephony_enabled", [True, False])
+def test_manual_pin_code_updates(is_telephony_enabled, settings):
+    """Manual pin code changes should persist regardless of telephony setting."""
+
+    settings.ROOM_TELEPHONY_ENABLED = is_telephony_enabled
+    settings.ROOM_TELEPHONY_PIN_LENGTH = 5
+
+    room = RoomFactory()
+    assert room.pin_code != "12345"
+
+    room.pin_code = "12345"
+    room.save()
+
+    assert room.pin_code == "12345"
+
+    # No data validation when manual updates are made
+    room.pin_code = "123"
+    room.save()
+
+    assert room.pin_code == "123"
+
+
+def test_pin_code_uniqueness(settings):
+    """Duplicate pin codes should raise validation error."""
+
+    settings.ROOM_TELEPHONY_ENABLED = True
+    settings.ROOM_TELEPHONY_PIN_LENGTH = 5
+
+    RoomFactory(pin_code="12345")
+
+    with pytest.raises(ValidationError) as excinfo:
+        RoomFactory(pin_code="12345")
+
+    assert "Room with this Room PIN code already exists." in str(excinfo.value)
+
+
+@pytest.mark.parametrize("invalid_length", [0, 1, 2, 3])
+def test_pin_code_minimum_length(invalid_length, settings):
+    """Pin codes should enforce minimum length for security."""
+
+    settings.ROOM_TELEPHONY_ENABLED = True
+    settings.ROOM_TELEPHONY_PIN_LENGTH = 4
+
+    # Assert no exception is raised with a valid length
+    RoomFactory()
+
+    settings.ROOM_TELEPHONY_PIN_LENGTH = invalid_length
+
+    with pytest.raises(ValueError) as excinfo:
+        RoomFactory()
+
+    assert "PIN code length must be at least 4 digits for minimal security" in str(
+        excinfo.value
+    )
+
+
+@mock.patch.object(Logger, "warning")
+@mock.patch.object(secrets, "randbelow", return_value=12345)
+def test_pin_generation_max_retries(mock_randbelow, mock_logger, settings):
+    """Pin generation should give up after max retries."""
+
+    settings.ROOM_TELEPHONY_ENABLED = True
+    settings.ROOM_TELEPHONY_PIN_LENGTH = 5
+
+    RoomFactory(pin_code="12345")
+
+    # Assert default max retries is low, 3
+    room1 = RoomFactory()
+    assert mock_randbelow.call_count == 3
+    assert room1.pin_code is None
+
+    mock_logger.assert_called_once_with(
+        "Failed to generate unique PIN code of length %s after %s attempts", 5, 3
+    )
+
+    mock_logger.reset_mock()
+    mock_randbelow.reset_mock()
+    settings.ROOM_TELEPHONY_PIN_MAX_RETRIES = 5
+
+    room2 = RoomFactory()
+    assert mock_randbelow.call_count == 5
+    assert room2.pin_code is None
+
+    mock_logger.assert_called_once_with(
+        "Failed to generate unique PIN code of length %s after %s attempts", 5, 5
+    )
+
+
+@mock.patch.object(secrets, "randbelow", return_value=12345)
+def test_pin_code_zero_padding(mock_randbelow, settings):
+    """Pin codes should be zero-padded to meet required length."""
+
+    settings.ROOM_TELEPHONY_ENABLED = True
+    settings.ROOM_TELEPHONY_PIN_LENGTH = 10
+
+    room = RoomFactory()
+    assert room.pin_code == "0000012345"
+
+
+@mock.patch.object(secrets, "randbelow", return_value=12345)
+def test_pin_generation_upper_bound(mock_randbelow, settings):
+    """Random number generator should use correct upper bound based on pin length."""
+
+    settings.ROOM_TELEPHONY_ENABLED = False
+
+    room = RoomFactory()
+
+    room.generate_unique_pin_code(length=5)
+
+    # Assert called with the right exclusive upper bound, 10^5
+    mock_randbelow.assert_called_with(100000)

src/backend/core/tests/test_utils.py

@@ -0,0 +1,62 @@
+"""
+Test utils functions
+"""
+
+from unittest import mock
+
+from core.utils import create_livekit_client
+
+
+@mock.patch("asyncio.get_running_loop")
+@mock.patch("core.utils.LiveKitAPI")
+def test_create_livekit_client_ssl_enabled(
+    mock_livekit_api, mock_get_running_loop, settings
+):
+    """Test LiveKitAPI client creation with SSL verification enabled."""
+    mock_get_running_loop.return_value = mock.MagicMock()
+    settings.LIVEKIT_VERIFY_SSL = True
+
+    create_livekit_client()
+
+    mock_livekit_api.assert_called_once_with(
+        **settings.LIVEKIT_CONFIGURATION, session=None
+    )
+
+
+@mock.patch("core.utils.aiohttp.ClientSession")
+@mock.patch("asyncio.get_running_loop")
+@mock.patch("core.utils.LiveKitAPI")
+def test_create_livekit_client_ssl_disabled(
+    mock_livekit_api, mock_get_running_loop, mock_client_session, settings
+):
+    """Test LiveKitAPI client creation with SSL verification disabled."""
+    mock_get_running_loop.return_value = mock.MagicMock()
+    mock_session_instance = mock.MagicMock()
+    mock_client_session.return_value = mock_session_instance
+    settings.LIVEKIT_VERIFY_SSL = False
+
+    create_livekit_client()
+
+    mock_livekit_api.assert_called_once_with(
+        **settings.LIVEKIT_CONFIGURATION, session=mock_session_instance
+    )
+
+
+@mock.patch("asyncio.get_running_loop")
+@mock.patch("core.utils.LiveKitAPI")
+def test_create_livekit_client_custom_configuration(
+    mock_livekit_api, mock_get_running_loop, settings
+):
+    """Test LiveKitAPI client creation with custom configuration."""
+    settings.LIVEKIT_VERIFY_SSL = True
+
+    mock_get_running_loop.return_value = mock.MagicMock()
+    custom_configuration = {
+        "api_key": "mock_key",
+        "api_secret": "mock_secret",
+        "url": "http://mock-url.com",
+    }
+
+    create_livekit_client(custom_configuration)
+
+    mock_livekit_api.assert_called_once_with(**custom_configuration, session=None)

src/backend/core/urls.py

@@ -3,10 +3,10 @@
 from django.conf import settings
 from django.urls import include, path
 
+from lasuite.oidc_login.urls import urlpatterns as oidc_urls
 from rest_framework.routers import DefaultRouter
 
 from core.api import get_frontend_configuration, viewsets
-from core.authentication.urls import urlpatterns as oidc_urls
 
 # - Main endpoints
 router = DefaultRouter()

src/backend/core/utils.py

@@ -13,8 +13,9 @@ from uuid import uuid4
 from django.conf import settings
 from django.core.files.storage import default_storage
 
+import aiohttp
 import botocore
-from livekit.api import AccessToken, VideoGrants
+from livekit.api import AccessToken, LiveKitAPI, VideoGrants
 
 
 def generate_color(identity: str) -> str:
@@ -142,3 +143,18 @@ def generate_s3_authorization_headers(key):
     auth.add_auth(request)
 
     return request
+
+
+def create_livekit_client(custom_configuration=None):
+    """Create and return a configured LiveKit API client."""
+
+    custom_session = None
+
+    if not settings.LIVEKIT_VERIFY_SSL:
+        connector = aiohttp.TCPConnector(ssl=False)
+        custom_session = aiohttp.ClientSession(connector=connector)
+
+    # Use default configuration if none provided
+    configuration = custom_configuration or settings.LIVEKIT_CONFIGURATION
+
+    return LiveKitAPI(session=custom_session, **configuration)

src/backend/locale/de_DE/LC_MESSAGES/django.po

@@ -0,0 +1,438 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2025-05-16 17:04+0000\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#: core/admin.py:26
+msgid "Personal info"
+msgstr "Persönliche Informationen"
+
+#: core/admin.py:39
+msgid "Permissions"
+msgstr "Berechtigungen"
+
+#: core/admin.py:51
+msgid "Important dates"
+msgstr "Wichtige Daten"
+
+#: core/api/serializers.py:63
+msgid "You must be administrator or owner of a room to add accesses to it."
+msgstr ""
+"Sie müssen Administrator oder Eigentümer eines Raums sein, um Zugriffe "
+"hinzuzufügen."
+
+#: core/models.py:31
+msgid "Member"
+msgstr "Mitglied"
+
+#: core/models.py:32
+msgid "Administrator"
+msgstr "Administrator"
+
+#: core/models.py:33
+msgid "Owner"
+msgstr "Eigentümer"
+
+#: core/models.py:49
+msgid "Initiated"
+msgstr "Gestartet"
+
+#: core/models.py:50
+msgid "Active"
+msgstr "Aktiv"
+
+#: core/models.py:51
+msgid "Stopped"
+msgstr "Beendet"
+
+#: core/models.py:52
+msgid "Saved"
+msgstr "Gespeichert"
+
+#: core/models.py:53
+msgid "Aborted"
+msgstr "Abgebrochen"
+
+#: core/models.py:54
+msgid "Failed to Start"
+msgstr "Start fehlgeschlagen"
+
+#: core/models.py:55
+msgid "Failed to Stop"
+msgstr "Stopp fehlgeschlagen"
+
+#: core/models.py:56
+msgid "Notification succeeded"
+msgstr "Benachrichtigung erfolgreich"
+
+#: core/models.py:83
+msgid "SCREEN_RECORDING"
+msgstr "BILDSCHIRMAUFZEICHNUNG"
+
+#: core/models.py:84
+msgid "TRANSCRIPT"
+msgstr "TRANSKRIPT"
+
+#: core/models.py:90
+msgid "Public Access"
+msgstr "Öffentlicher Zugriff"
+
+#: core/models.py:91
+msgid "Trusted Access"
+msgstr "Vertrauenswürdiger Zugriff"
+
+#: core/models.py:92
+msgid "Restricted Access"
+msgstr "Eingeschränkter Zugriff"
+
+#: core/models.py:104
+msgid "id"
+msgstr "ID"
+
+#: core/models.py:105
+msgid "primary key for the record as UUID"
+msgstr "Primärschlüssel des Eintrags als UUID"
+
+#: core/models.py:111
+msgid "created on"
+msgstr "erstellt am"
+
+#: core/models.py:112
+msgid "date and time at which a record was created"
+msgstr "Datum und Uhrzeit der Erstellung eines Eintrags"
+
+#: core/models.py:117
+msgid "updated on"
+msgstr "aktualisiert am"
+
+#: core/models.py:118
+msgid "date and time at which a record was last updated"
+msgstr "Datum und Uhrzeit der letzten Aktualisierung eines Eintrags"
+
+#: core/models.py:138
+msgid ""
+"Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
+"_ characters."
+msgstr ""
+"Geben Sie einen gültigen Sub ein. Dieser Wert darf nur Buchstaben, Zahlen "
+"und die Zeichen @/./+/-/_ enthalten."
+
+#: core/models.py:144
+msgid "sub"
+msgstr "Sub"
+
+#: core/models.py:146
+msgid ""
+"Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_ "
+"characters only."
+msgstr ""
+"Erforderlich. Maximal 255 Zeichen. Nur Buchstaben, Zahlen und @/./+/-/_ sind "
+"erlaubt."
+
+#: core/models.py:154
+msgid "identity email address"
+msgstr "Identitäts-E-Mail-Adresse"
+
+#: core/models.py:159
+msgid "admin email address"
+msgstr "Administrator-E-Mail-Adresse"
+
+#: core/models.py:161
+msgid "full name"
+msgstr "Vollständiger Name"
+
+#: core/models.py:163
+msgid "short name"
+msgstr "Kurzname"
+
+#: core/models.py:169
+msgid "language"
+msgstr "Sprache"
+
+#: core/models.py:170
+msgid "The language in which the user wants to see the interface."
+msgstr "Die Sprache, in der der Benutzer die Oberfläche sehen möchte."
+
+#: core/models.py:176
+msgid "The timezone in which the user wants to see times."
+msgstr "Die Zeitzone, in der der Benutzer die Zeiten sehen möchte."
+
+#: core/models.py:179
+msgid "device"
+msgstr "Gerät"
+
+#: core/models.py:181
+msgid "Whether the user is a device or a real user."
+msgstr "Ob es sich um ein Gerät oder einen echten Benutzer handelt."
+
+#: core/models.py:184
+msgid "staff status"
+msgstr "Mitarbeiterstatus"
+
+#: core/models.py:186
+msgid "Whether the user can log into this admin site."
+msgstr "Ob der Benutzer sich bei dieser Admin-Seite anmelden kann."
+
+#: core/models.py:189
+msgid "active"
+msgstr "aktiv"
+
+#: core/models.py:192
+msgid ""
+"Whether this user should be treated as active. Unselect this instead of "
+"deleting accounts."
+msgstr ""
+"Ob dieser Benutzer als aktiv behandelt werden soll. Deaktivieren Sie dies "
+"anstelle des Löschens des Kontos."
+
+#: core/models.py:205
+msgid "user"
+msgstr "Benutzer"
+
+#: core/models.py:206
+msgid "users"
+msgstr "Benutzer"
+
+#: core/models.py:265
+msgid "Resource"
+msgstr "Ressource"
+
+#: core/models.py:266
+msgid "Resources"
+msgstr "Ressourcen"
+
+#: core/models.py:320
+msgid "Resource access"
+msgstr "Ressourcenzugriff"
+
+#: core/models.py:321
+msgid "Resource accesses"
+msgstr "Ressourcenzugriffe"
+
+#: core/models.py:327
+msgid "Resource access with this User and Resource already exists."
+msgstr ""
+"Ein Ressourcenzugriff mit diesem Benutzer und dieser Ressource existiert "
+"bereits."
+
+#: core/models.py:383
+msgid "Visio room configuration"
+msgstr "Visio-Raumkonfiguration"
+
+#: core/models.py:384
+msgid "Values for Visio parameters to configure the room."
+msgstr "Werte für Visio-Parameter zur Konfiguration des Raums."
+
+#: core/models.py:391
+msgid "Room PIN code"
+msgstr "PIN-Code für den Raum"
+
+#: core/models.py:392
+msgid "Unique n-digit code that identifies this room in telephony mode."
+msgstr "Eindeutiger n-stelliger Code, der diesen Raum im Telephonmodus identifiziert."
+
+#: core/models.py:398 core/models.py:552
+msgid "Room"
+msgstr "Raum"
+
+#: core/models.py:399
+msgid "Rooms"
+msgstr "Räume"
+
+#: core/models.py:563
+msgid "Worker ID"
+msgstr "Worker-ID"
+
+#: core/models.py:565
+msgid ""
+"Enter an identifier for the worker recording.This ID is retained even when "
+"the worker stops, allowing for easy tracking."
+msgstr ""
+"Geben Sie eine ID für die Aufzeichnung des Workers ein. Diese ID bleibt "
+"erhalten, auch wenn der Worker stoppt, was ein einfaches Nachverfolgen "
+"ermöglicht."
+
+#: core/models.py:573
+msgid "Recording mode"
+msgstr "Aufzeichnungsmodus"
+
+#: core/models.py:574
+msgid "Defines the mode of recording being called."
+msgstr "Definiert den aufgerufenen Aufzeichnungsmodus."
+
+#: core/models.py:580
+msgid "Recording"
+msgstr "Aufzeichnung"
+
+#: core/models.py:581
+msgid "Recordings"
+msgstr "Aufzeichnungen"
+
+#: core/models.py:689
+msgid "Recording/user relation"
+msgstr "Beziehung Aufzeichnung/Benutzer"
+
+#: core/models.py:690
+msgid "Recording/user relations"
+msgstr "Beziehungen Aufzeichnung/Benutzer"
+
+#: core/models.py:696
+msgid "This user is already in this recording."
+msgstr "Dieser Benutzer ist bereits Teil dieser Aufzeichnung."
+
+#: core/models.py:702
+msgid "This team is already in this recording."
+msgstr "Dieses Team ist bereits Teil dieser Aufzeichnung."
+
+#: core/models.py:708
+msgid "Either user or team must be set, not both."
+msgstr "Entweder Benutzer oder Team muss festgelegt werden, nicht beides."
+
+#: core/recording/event/notification.py:94
+msgid "Your recording is ready"
+msgstr "Ihre Aufzeichnung ist bereit"
+
+#: core/services/invitation.py:44
+#, python-brace-format
+msgid "Video call in progress: {sender.email} is waiting for you to connect"
+msgstr "Videoanruf läuft: {sender.email} wartet auf Ihre Teilnahme"
+
+#: core/templates/mail/html/invitation.html:159
+#: core/templates/mail/html/screen_recording.html:159
+#: core/templates/mail/text/invitation.txt:3
+#: core/templates/mail/text/screen_recording.txt:3
+msgid "Logo email"
+msgstr "Logo-E-Mail"
+
+#: core/templates/mail/html/invitation.html:189
+#: core/templates/mail/text/invitation.txt:5
+msgid "invites you to join an ongoing video call"
+msgstr "lädt Sie zu einem laufenden Videoanruf ein"
+
+#: core/templates/mail/html/invitation.html:200
+#: core/templates/mail/text/invitation.txt:7
+msgid "JOIN THE CALL"
+msgstr "AM ANRUF TEILNEHMEN"
+
+#: core/templates/mail/html/invitation.html:227
+#: core/templates/mail/text/invitation.txt:13
+msgid ""
+"If you can't click the button, copy and paste the URL into your browser to "
+"join the call."
+msgstr ""
+"Wenn Sie den Button nicht anklicken können, kopieren Sie die URL und fügen "
+"Sie sie in Ihren Browser ein, um am Anruf teilzunehmen."
+
+#: core/templates/mail/html/invitation.html:235
+#: core/templates/mail/text/invitation.txt:15
+msgid "Tips for a better experience:"
+msgstr "Tipps für ein besseres Erlebnis:"
+
+#: core/templates/mail/html/invitation.html:237
+#: core/templates/mail/text/invitation.txt:17
+msgid "Use Chrome or Firefox for better call quality"
+msgstr "Verwenden Sie Chrome oder Firefox für eine bessere Anrufqualität"
+
+#: core/templates/mail/html/invitation.html:238
+#: core/templates/mail/text/invitation.txt:18
+msgid "Test your microphone and camera before joining"
+msgstr "Testen Sie Ihr Mikrofon und Ihre Kamera vor dem Beitritt"
+
+#: core/templates/mail/html/invitation.html:239
+#: core/templates/mail/text/invitation.txt:19
+msgid "Make sure you have a stable internet connection"
+msgstr "Stellen Sie sicher, dass Sie eine stabile Internetverbindung haben"
+
+#: core/templates/mail/html/invitation.html:248
+#: core/templates/mail/html/screen_recording.html:240
+#: core/templates/mail/text/invitation.txt:21
+#: core/templates/mail/text/screen_recording.txt:22
+#, python-format
+msgid " Thank you for using %(brandname)s. "
+msgstr " Vielen Dank für die Nutzung von %(brandname)s. "
+
+#: core/templates/mail/html/screen_recording.html:188
+#: core/templates/mail/text/screen_recording.txt:6
+msgid "Your recording is ready!"
+msgstr "Ihre Aufzeichnung ist fertig!"
+
+#: core/templates/mail/html/screen_recording.html:195
+#: core/templates/mail/text/screen_recording.txt:8
+#, python-format
+msgid ""
+" Your recording of \"%(room_name)s\" on %(recording_date)s at "
+"%(recording_time)s is now ready to download. "
+msgstr ""
+" Ihre Aufzeichnung von \"%(room_name)s\" am %(recording_date)s um "
+"%(recording_time)s steht nun zum Herunterladen bereit. "
+
+#: core/templates/mail/html/screen_recording.html:195
+#: core/templates/mail/text/screen_recording.txt:8
+#, python-format
+msgid " The recording will expire in %(days)s days. "
+msgstr " Die Aufzeichnung wird in %(days)s Tagen ablaufen. "
+
+#: core/templates/mail/html/screen_recording.html:201
+#: core/templates/mail/text/screen_recording.txt:10
+msgid "To keep this recording permanently:"
+msgstr "So speichern Sie diese Aufzeichnung dauerhaft:"
+
+#: core/templates/mail/html/screen_recording.html:203
+#: core/templates/mail/text/screen_recording.txt:12
+msgid "Click the \"Open\" button below "
+msgstr "Klicken Sie auf den Button „Öffnen“ unten "
+
+#: core/templates/mail/html/screen_recording.html:204
+#: core/templates/mail/text/screen_recording.txt:13
+msgid "Use the \"Download\" button in the interface "
+msgstr "Verwenden Sie den Button „Herunterladen“ in der Oberfläche "
+
+#: core/templates/mail/html/screen_recording.html:205
+#: core/templates/mail/text/screen_recording.txt:14
+msgid "Save the file to your preferred location"
+msgstr "Speichern Sie die Datei an einem gewünschten Ort"
+
+#: core/templates/mail/html/screen_recording.html:216
+#: core/templates/mail/text/screen_recording.txt:16
+msgid "Open"
+msgstr "Öffnen"
+
+#: core/templates/mail/html/screen_recording.html:225
+#: core/templates/mail/text/screen_recording.txt:18
+#, python-format
+msgid ""
+" If you have any questions or need assistance, please contact our support "
+"team at %(support_email)s. "
+msgstr ""
+" Wenn Sie Fragen haben oder Unterstützung benötigen, wenden Sie sich bitte "
+"an unser Support-Team unter %(support_email)s. "
+
+#: meet/settings.py:162
+msgid "English"
+msgstr "Englisch"
+
+#: meet/settings.py:163
+msgid "French"
+msgstr "Französisch"
+
+#: meet/settings.py:164
+msgid "Dutch"
+msgstr "Niederländisch"
+
+#: meet/settings.py:165
+msgid "German"
+msgstr "Deutsch"

src/backend/locale/en_US/LC_MESSAGES/django.po

@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-04-14 19:04+0000\n"
+"POT-Creation-Date: 2025-05-16 17:04+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -23,390 +23,347 @@ msgstr ""
 
 #: core/admin.py:39
 msgid "Permissions"
-msgstr ""
+msgstr "Permissions"
 
 #: core/admin.py:51
 msgid "Important dates"
-msgstr ""
+msgstr "Important dates"
 
-#: core/api/serializers.py:60
+#: core/api/serializers.py:63
 msgid "You must be administrator or owner of a room to add accesses to it."
-msgstr ""
+msgstr "You must be administrator or owner of a room to add accesses to it."
 
-#: core/authentication/backends.py:77
-msgid "User info contained no recognizable user identification"
-msgstr ""
-
-#: core/authentication/backends.py:102
-msgid "User account is disabled"
-msgstr ""
-
-#: core/authentication/backends.py:142
-msgid "Multiple user accounts share a common email."
-msgstr ""
-
-#: core/models.py:27
+#: core/models.py:31
 msgid "Member"
-msgstr ""
+msgstr "Member"
 
-#: core/models.py:28
+#: core/models.py:32
 msgid "Administrator"
-msgstr ""
+msgstr "Administrator"
 
-#: core/models.py:29
+#: core/models.py:33
 msgid "Owner"
-msgstr ""
-
-#: core/models.py:45
-msgid "Initiated"
-msgstr ""
-
-#: core/models.py:46
-msgid "Active"
-msgstr ""
-
-#: core/models.py:47
-msgid "Stopped"
-msgstr ""
-
-#: core/models.py:48
-msgid "Saved"
-msgstr ""
+msgstr "Owner"
 
 #: core/models.py:49
-msgid "Aborted"
-msgstr ""
+msgid "Initiated"
+msgstr "Initiated"
 
 #: core/models.py:50
-msgid "Failed to Start"
-msgstr ""
+msgid "Active"
+msgstr "Active"
 
 #: core/models.py:51
-msgid "Failed to Stop"
-msgstr ""
+msgid "Stopped"
+msgstr "Stopped"
 
 #: core/models.py:52
+msgid "Saved"
+msgstr "Saved"
+
+#: core/models.py:53
+msgid "Aborted"
+msgstr "Aborted"
+
+#: core/models.py:54
+msgid "Failed to Start"
+msgstr "Failed to Start"
+
+#: core/models.py:55
+msgid "Failed to Stop"
+msgstr "Failed to Stop"
+
+#: core/models.py:56
 msgid "Notification succeeded"
-msgstr ""
+msgstr "Notification succeeded"
 
-#: core/models.py:79
+#: core/models.py:83
 msgid "SCREEN_RECORDING"
-msgstr ""
+msgstr "SCREEN_RECORDING"
 
-#: core/models.py:80
+#: core/models.py:84
 msgid "TRANSCRIPT"
-msgstr ""
+msgstr "TRANSCRIPT"
 
-#: core/models.py:86
+#: core/models.py:90
 msgid "Public Access"
-msgstr ""
+msgstr "Public Access"
 
-#: core/models.py:87
+#: core/models.py:91
 msgid "Trusted Access"
-msgstr ""
+msgstr "Trusted Access"
 
-#: core/models.py:88
+#: core/models.py:92
 msgid "Restricted Access"
-msgstr ""
+msgstr "Restricted Access"
 
-#: core/models.py:100
+#: core/models.py:104
 msgid "id"
-msgstr ""
+msgstr "id"
 
-#: core/models.py:101
+#: core/models.py:105
 msgid "primary key for the record as UUID"
-msgstr ""
+msgstr "primary key for the record as UUID"
 
-#: core/models.py:107
+#: core/models.py:111
 msgid "created on"
-msgstr ""
+msgstr "created on"
 
-#: core/models.py:108
+#: core/models.py:112
 msgid "date and time at which a record was created"
-msgstr ""
+msgstr "date and time at which a record was created"
 
-#: core/models.py:113
+#: core/models.py:117
 msgid "updated on"
-msgstr ""
+msgstr "updated on"
 
-#: core/models.py:114
+#: core/models.py:118
 msgid "date and time at which a record was last updated"
-msgstr ""
+msgstr "date and time at which a record was last updated"
 
-#: core/models.py:134
+#: core/models.py:138
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
 msgstr ""
+"Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
+"_ characters."
 
-#: core/models.py:140
+#: core/models.py:144
 msgid "sub"
-msgstr ""
+msgstr "sub"
 
-#: core/models.py:142
+#: core/models.py:146
 msgid ""
 "Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_ "
 "characters only."
 msgstr ""
+"Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_ "
+"characters only."
 
-#: core/models.py:150
+#: core/models.py:154
 msgid "identity email address"
-msgstr ""
-
-#: core/models.py:155
-msgid "admin email address"
-msgstr ""
-
-#: core/models.py:157
-msgid "full name"
-msgstr ""
+msgstr "identity email address"
 
 #: core/models.py:159
+msgid "admin email address"
+msgstr "admin email address"
+
+#: core/models.py:161
+msgid "full name"
+msgstr "full name"
+
+#: core/models.py:163
 msgid "short name"
-msgstr ""
+msgstr "short name"
 
-#: core/models.py:165
+#: core/models.py:169
 msgid "language"
-msgstr ""
+msgstr "language"
 
-#: core/models.py:166
+#: core/models.py:170
 msgid "The language in which the user wants to see the interface."
-msgstr ""
+msgstr "The language in which the user wants to see the interface."
 
-#: core/models.py:172
+#: core/models.py:176
 msgid "The timezone in which the user wants to see times."
-msgstr ""
+msgstr "The timezone in which the user wants to see times."
 
-#: core/models.py:175
+#: core/models.py:179
 msgid "device"
-msgstr ""
+msgstr "device"
 
-#: core/models.py:177
+#: core/models.py:181
 msgid "Whether the user is a device or a real user."
-msgstr ""
+msgstr "Whether the user is a device or a real user."
 
-#: core/models.py:180
+#: core/models.py:184
 msgid "staff status"
-msgstr ""
+msgstr "staff status"
 
-#: core/models.py:182
+#: core/models.py:186
 msgid "Whether the user can log into this admin site."
-msgstr ""
+msgstr "Whether the user can log into this admin site."
 
-#: core/models.py:185
+#: core/models.py:189
 msgid "active"
-msgstr ""
+msgstr "active"
 
-#: core/models.py:188
+#: core/models.py:192
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
 msgstr ""
+"Whether this user should be treated as active. Unselect this instead of "
+"deleting accounts."
 
-#: core/models.py:201
+#: core/models.py:205
 msgid "user"
-msgstr ""
+msgstr "user"
 
-#: core/models.py:202
+#: core/models.py:206
 msgid "users"
-msgstr ""
+msgstr "users"
 
-#: core/models.py:261
+#: core/models.py:265
 msgid "Resource"
-msgstr ""
+msgstr "Resource"
 
-#: core/models.py:262
+#: core/models.py:266
 msgid "Resources"
-msgstr ""
+msgstr "Resources"
 
-#: core/models.py:316
+#: core/models.py:320
 msgid "Resource access"
-msgstr ""
+msgstr "Resource access"
 
-#: core/models.py:317
+#: core/models.py:321
 msgid "Resource accesses"
-msgstr ""
+msgstr "Resource accesses"
 
-#: core/models.py:323
+#: core/models.py:327
 msgid "Resource access with this User and Resource already exists."
-msgstr ""
+msgstr "Resource access with this User and Resource already exists."
 
-#: core/models.py:379
+#: core/models.py:383
 msgid "Visio room configuration"
-msgstr ""
+msgstr "Visio room configuration"
 
-#: core/models.py:380
+#: core/models.py:384
 msgid "Values for Visio parameters to configure the room."
-msgstr ""
+msgstr "Values for Visio parameters to configure the room."
 
-#: core/models.py:386 core/models.py:506
+#: core/models.py:391
+msgid "Room PIN code"
+msgstr "Room PIN code"
+
+#: core/models.py:392
+msgid "Unique n-digit code that identifies this room in telephony mode."
+msgstr "Unique n-digit code that identifies this room in telephony mode."
+
+#: core/models.py:398 core/models.py:552
 msgid "Room"
-msgstr ""
+msgstr "Room"
 
-#: core/models.py:387
+#: core/models.py:399
 msgid "Rooms"
-msgstr ""
+msgstr "Rooms"
 
-#: core/models.py:517
+#: core/models.py:563
 msgid "Worker ID"
-msgstr ""
+msgstr "Worker ID"
 
-#: core/models.py:519
+#: core/models.py:565
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
 msgstr ""
+"Enter an identifier for the worker recording.This ID is retained even when "
+"the worker stops, allowing for easy tracking."
 
-#: core/models.py:527
+#: core/models.py:573
 msgid "Recording mode"
-msgstr ""
+msgstr "Recording mode"
 
-#: core/models.py:528
+#: core/models.py:574
 msgid "Defines the mode of recording being called."
-msgstr ""
+msgstr "Defines the mode of recording being called."
 
-#: core/models.py:534
+#: core/models.py:580
 msgid "Recording"
-msgstr ""
+msgstr "Recording"
 
-#: core/models.py:535
+#: core/models.py:581
 msgid "Recordings"
-msgstr ""
+msgstr "Recordings"
 
-#: core/models.py:592
+#: core/models.py:689
 msgid "Recording/user relation"
-msgstr ""
+msgstr "Recording/user relation"
 
-#: core/models.py:593
+#: core/models.py:690
 msgid "Recording/user relations"
-msgstr ""
+msgstr "Recording/user relations"
 
-#: core/models.py:599
+#: core/models.py:696
 msgid "This user is already in this recording."
-msgstr ""
+msgstr "This user is already in this recording."
 
-#: core/models.py:605
+#: core/models.py:702
 msgid "This team is already in this recording."
-msgstr ""
+msgstr "This team is already in this recording."
 
-#: core/models.py:611
+#: core/models.py:708
 msgid "Either user or team must be set, not both."
-msgstr ""
+msgstr "Either user or team must be set, not both."
 
-#: core/recording/event/authentication.py:58
-msgid "Authentication is enabled but token is not configured."
-msgstr ""
-
-#: core/recording/event/authentication.py:70
-msgid "Authorization header is required"
-msgstr ""
-
-#: core/recording/event/authentication.py:78
-msgid "Invalid authorization header."
-msgstr ""
-
-#: core/recording/event/authentication.py:88
-msgid "Invalid token"
-msgstr ""
-
-#: core/recording/event/notification.py:81
+#: core/recording/event/notification.py:94
 msgid "Your recording is ready"
-msgstr ""
+msgstr "Your recording is ready"
 
-#: core/templates/mail/html/invitation.html:160
+#: core/services/invitation.py:44
+#, python-brace-format
+msgid "Video call in progress: {sender.email} is waiting for you to connect"
+msgstr "Video call in progress: {sender.email} is waiting for you to connect"
+
+#: core/templates/mail/html/invitation.html:159
+#: core/templates/mail/html/screen_recording.html:159
 #: core/templates/mail/text/invitation.txt:3
-msgid "La Suite Numérique"
-msgstr ""
+#: core/templates/mail/text/screen_recording.txt:3
+msgid "Logo email"
+msgstr "Logo email"
 
-#: core/templates/mail/html/invitation.html:190
+#: core/templates/mail/html/invitation.html:189
 #: core/templates/mail/text/invitation.txt:5
-msgid "Invitation to join a team"
-msgstr ""
+msgid "invites you to join an ongoing video call"
+msgstr "invites you to join an ongoing video call"
 
-#: core/templates/mail/html/invitation.html:198
-msgid "Welcome to <strong>Meet</strong>"
-msgstr ""
+#: core/templates/mail/html/invitation.html:200
+#: core/templates/mail/text/invitation.txt:7
+msgid "JOIN THE CALL"
+msgstr "JOIN THE CALL"
 
-#: core/templates/mail/html/invitation.html:216
-#: core/templates/mail/text/invitation.txt:12
-msgid "Logo"
-msgstr ""
-
-#: core/templates/mail/html/invitation.html:226
-#: core/templates/mail/text/invitation.txt:14
+#: core/templates/mail/html/invitation.html:227
+#: core/templates/mail/text/invitation.txt:13
 msgid ""
-"We are delighted to welcome you to our community on Meet, your new companion "
-"to collaborate on documents efficiently, intuitively, and securely."
+"If you can't click the button, copy and paste the URL into your browser to "
+"join the call."
 msgstr ""
+"If you can't click the button, copy and paste the URL into your browser to "
+"join the call."
 
-#: core/templates/mail/html/invitation.html:231
+#: core/templates/mail/html/invitation.html:235
 #: core/templates/mail/text/invitation.txt:15
-msgid ""
-"Our application is designed to help you organize, collaborate, and manage "
-"permissions."
-msgstr ""
-
-#: core/templates/mail/html/invitation.html:236
-#: core/templates/mail/text/invitation.txt:16
-msgid "With Meet, you will be able to:"
-msgstr ""
+msgid "Tips for a better experience:"
+msgstr "Tips for a better experience:"
 
 #: core/templates/mail/html/invitation.html:237
 #: core/templates/mail/text/invitation.txt:17
-msgid "Create documents."
-msgstr ""
+msgid "Use Chrome or Firefox for better call quality"
+msgstr "Use Chrome or Firefox for better call quality"
 
 #: core/templates/mail/html/invitation.html:238
 #: core/templates/mail/text/invitation.txt:18
-msgid "Invite members of your document or community in just a few clicks."
-msgstr ""
+msgid "Test your microphone and camera before joining"
+msgstr "Test your microphone and camera before joining"
 
-#: core/templates/mail/html/invitation.html:249
-#: core/templates/mail/text/invitation.txt:20
-msgid "Visit Meet"
-msgstr ""
+#: core/templates/mail/html/invitation.html:239
+#: core/templates/mail/text/invitation.txt:19
+msgid "Make sure you have a stable internet connection"
+msgstr "Make sure you have a stable internet connection"
 
-#: core/templates/mail/html/invitation.html:258
-#: core/templates/mail/text/invitation.txt:22
-msgid ""
-"We are confident that Meet will help you increase efficiency and "
-"productivity while strengthening the bond among members."
-msgstr ""
-
-#: core/templates/mail/html/invitation.html:263
-#: core/templates/mail/text/invitation.txt:23
-msgid ""
-"Feel free to explore all the features of the application and share your "
-"feedback and suggestions with us. Your feedback is valuable to us and will "
-"enable us to continually improve our service."
-msgstr ""
-
-#: core/templates/mail/html/invitation.html:268
-#: core/templates/mail/text/invitation.txt:24
-msgid ""
-"Once again, welcome aboard! We are eager to accompany you on you "
-"collaboration adventure."
-msgstr ""
-
-#: core/templates/mail/html/invitation.html:275
-#: core/templates/mail/text/invitation.txt:26
-msgid "Sincerely,"
-msgstr ""
-
-#: core/templates/mail/html/invitation.html:276
-#: core/templates/mail/text/invitation.txt:28
-msgid "The La Suite Numérique Team"
-msgstr ""
-
-#: core/templates/mail/html/screen_recording.html:159
-#: core/templates/mail/text/screen_recording.txt:3
-msgid "Logo email"
-msgstr ""
+#: core/templates/mail/html/invitation.html:248
+#: core/templates/mail/html/screen_recording.html:240
+#: core/templates/mail/text/invitation.txt:21
+#: core/templates/mail/text/screen_recording.txt:22
+#, python-format
+msgid " Thank you for using %(brandname)s. "
+msgstr " Thank you for using %(brandname)s. "
 
 #: core/templates/mail/html/screen_recording.html:188
 #: core/templates/mail/text/screen_recording.txt:6
 msgid "Your recording is ready!"
-msgstr ""
+msgstr "Your recording is ready!"
 
 #: core/templates/mail/html/screen_recording.html:195
 #: core/templates/mail/text/screen_recording.txt:8
@@ -415,31 +372,39 @@ msgid ""
 " Your recording of \"%(room_name)s\" on %(recording_date)s at "
 "%(recording_time)s is now ready to download. "
 msgstr ""
+" Your recording of \"%(room_name)s\" on %(recording_date)s at "
+"%(recording_time)s is now ready to download. "
+
+#: core/templates/mail/html/screen_recording.html:195
+#: core/templates/mail/text/screen_recording.txt:8
+#, python-format
+msgid " The recording will expire in %(days)s days. "
+msgstr " The recording will expire in %(days)s days. "
 
 #: core/templates/mail/html/screen_recording.html:201
 #: core/templates/mail/text/screen_recording.txt:10
 msgid "To keep this recording permanently:"
-msgstr ""
+msgstr "To keep this recording permanently:"
 
 #: core/templates/mail/html/screen_recording.html:203
 #: core/templates/mail/text/screen_recording.txt:12
-msgid "Click the \\"
-msgstr ""
+msgid "Click the \"Open\" button below "
+msgstr "Click the \"Open\" button below "
 
 #: core/templates/mail/html/screen_recording.html:204
 #: core/templates/mail/text/screen_recording.txt:13
-msgid "Use the \\"
-msgstr ""
+msgid "Use the \"Download\" button in the interface "
+msgstr "Use the \"Download\" button in the interface "
 
 #: core/templates/mail/html/screen_recording.html:205
 #: core/templates/mail/text/screen_recording.txt:14
 msgid "Save the file to your preferred location"
-msgstr ""
+msgstr "Save the file to your preferred location"
 
 #: core/templates/mail/html/screen_recording.html:216
 #: core/templates/mail/text/screen_recording.txt:16
 msgid "Open"
-msgstr ""
+msgstr "Open"
 
 #: core/templates/mail/html/screen_recording.html:225
 #: core/templates/mail/text/screen_recording.txt:18
@@ -448,21 +413,21 @@ msgid ""
 " If you have any questions or need assistance, please contact our support "
 "team at %(support_email)s. "
 msgstr ""
-
-#: core/templates/mail/html/screen_recording.html:240
-#: core/templates/mail/text/screen_recording.txt:22
-#, python-format
-msgid " Thank you for using %(brandname)s. "
-msgstr ""
-
-#: core/templates/mail/text/invitation.txt:8
-msgid "Welcome to Meet"
-msgstr ""
-
-#: meet/settings.py:161
-msgid "English"
-msgstr ""
+" If you have any questions or need assistance, please contact our support "
+"team at %(support_email)s. "
 
 #: meet/settings.py:162
+msgid "English"
+msgstr "English"
+
+#: meet/settings.py:163
 msgid "French"
-msgstr ""
+msgstr "French"
+
+#: meet/settings.py:164
+msgid "Dutch"
+msgstr "Dutch"
+
+#: meet/settings.py:165
+msgid "German"
+msgstr "German"

src/backend/locale/fr_FR/LC_MESSAGES/django.po

@@ -8,9 +8,9 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-04-14 19:04+0000\n"
+"POT-Creation-Date: 2025-05-16 17:04+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Last-Translator: antoine.lebaud@mail.numerique.gouv.fr\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
 "Language: \n"
 "MIME-Version: 1.0\n"
@@ -19,394 +19,357 @@ msgstr ""
 
 #: core/admin.py:26
 msgid "Personal info"
-msgstr ""
+msgstr "Informations personnelles"
 
 #: core/admin.py:39
 msgid "Permissions"
-msgstr ""
+msgstr "Permissions"
 
 #: core/admin.py:51
 msgid "Important dates"
-msgstr ""
+msgstr "Dates importantes"
 
-#: core/api/serializers.py:60
+#: core/api/serializers.py:63
 msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr ""
+"Vous devez être administrateur ou propriétaire d'une salle pour y ajouter "
+"des accès."
 
-#: core/authentication/backends.py:77
-msgid "User info contained no recognizable user identification"
-msgstr ""
-
-#: core/authentication/backends.py:102
-msgid "User account is disabled"
-msgstr ""
-
-#: core/authentication/backends.py:142
-msgid "Multiple user accounts share a common email."
-msgstr ""
-
-#: core/models.py:27
+#: core/models.py:31
 msgid "Member"
-msgstr ""
+msgstr "Membre"
 
-#: core/models.py:28
+#: core/models.py:32
 msgid "Administrator"
-msgstr ""
+msgstr "Administrateur"
 
-#: core/models.py:29
+#: core/models.py:33
 msgid "Owner"
-msgstr ""
-
-#: core/models.py:45
-msgid "Initiated"
-msgstr ""
-
-#: core/models.py:46
-msgid "Active"
-msgstr ""
-
-#: core/models.py:47
-msgid "Stopped"
-msgstr ""
-
-#: core/models.py:48
-msgid "Saved"
-msgstr ""
+msgstr "Propriétaire"
 
 #: core/models.py:49
-msgid "Aborted"
-msgstr ""
+msgid "Initiated"
+msgstr "Initié"
 
 #: core/models.py:50
-msgid "Failed to Start"
-msgstr ""
+msgid "Active"
+msgstr "Actif"
 
 #: core/models.py:51
-msgid "Failed to Stop"
-msgstr ""
+msgid "Stopped"
+msgstr "Arrêté"
 
 #: core/models.py:52
+msgid "Saved"
+msgstr "Enregistré"
+
+#: core/models.py:53
+msgid "Aborted"
+msgstr "Abandonné"
+
+#: core/models.py:54
+msgid "Failed to Start"
+msgstr "Échec au démarrage"
+
+#: core/models.py:55
+msgid "Failed to Stop"
+msgstr "Échec à l'arrêt"
+
+#: core/models.py:56
 msgid "Notification succeeded"
-msgstr ""
+msgstr "Notification réussie"
 
-#: core/models.py:79
+#: core/models.py:83
 msgid "SCREEN_RECORDING"
-msgstr ""
+msgstr "ENREGISTREMENT_ÉCRAN"
 
-#: core/models.py:80
+#: core/models.py:84
 msgid "TRANSCRIPT"
-msgstr ""
+msgstr "TRANSCRIPTION"
 
-#: core/models.py:86
+#: core/models.py:90
 msgid "Public Access"
-msgstr ""
+msgstr "Accès public"
 
-#: core/models.py:87
+#: core/models.py:91
 msgid "Trusted Access"
-msgstr ""
+msgstr "Accès de confiance"
 
-#: core/models.py:88
+#: core/models.py:92
 msgid "Restricted Access"
-msgstr ""
+msgstr "Accès restreint"
 
-#: core/models.py:100
+#: core/models.py:104
 msgid "id"
-msgstr ""
+msgstr "id"
 
-#: core/models.py:101
+#: core/models.py:105
 msgid "primary key for the record as UUID"
-msgstr ""
+msgstr "clé primaire pour l'enregistrement sous forme d'UUID"
 
-#: core/models.py:107
+#: core/models.py:111
 msgid "created on"
-msgstr ""
+msgstr "créé le"
 
-#: core/models.py:108
+#: core/models.py:112
 msgid "date and time at which a record was created"
-msgstr ""
+msgstr "date et heure auxquelles un enregistrement a été créé"
 
-#: core/models.py:113
+#: core/models.py:117
 msgid "updated on"
-msgstr ""
+msgstr "mis à jour le"
 
-#: core/models.py:114
+#: core/models.py:118
 msgid "date and time at which a record was last updated"
 msgstr ""
+"date et heure auxquelles un enregistrement a été mis à jour pour la dernière "
+"fois"
 
-#: core/models.py:134
+#: core/models.py:138
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
 msgstr ""
+"Entrez un sub valide. Cette valeur ne peut contenir que des lettres, "
+"des chiffres et les caractères @/./+/-/_."
 
-#: core/models.py:140
+#: core/models.py:144
 msgid "sub"
-msgstr ""
+msgstr "sub"
 
-#: core/models.py:142
+#: core/models.py:146
 msgid ""
 "Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_ "
 "characters only."
 msgstr ""
+"Obligatoire. 255 caractères ou moins. Lettres, chiffres et caractères @/./"
+"+/-/_ uniquement."
 
-#: core/models.py:150
+#: core/models.py:154
 msgid "identity email address"
-msgstr ""
-
-#: core/models.py:155
-msgid "admin email address"
-msgstr ""
-
-#: core/models.py:157
-msgid "full name"
-msgstr ""
+msgstr "adresse e-mail d'identité"
 
 #: core/models.py:159
+msgid "admin email address"
+msgstr "adresse e-mail d'administrateur"
+
+#: core/models.py:161
+msgid "full name"
+msgstr "nom complet"
+
+#: core/models.py:163
 msgid "short name"
-msgstr ""
+msgstr "nom court"
 
-#: core/models.py:165
+#: core/models.py:169
 msgid "language"
-msgstr ""
+msgstr "langue"
 
-#: core/models.py:166
+#: core/models.py:170
 msgid "The language in which the user wants to see the interface."
-msgstr ""
+msgstr "La langue dans laquelle l'utilisateur souhaite voir l'interface."
 
-#: core/models.py:172
+#: core/models.py:176
 msgid "The timezone in which the user wants to see times."
-msgstr ""
+msgstr "Le fuseau horaire dans lequel l'utilisateur souhaite voir les heures."
 
-#: core/models.py:175
+#: core/models.py:179
 msgid "device"
-msgstr ""
+msgstr "appareil"
 
-#: core/models.py:177
+#: core/models.py:181
 msgid "Whether the user is a device or a real user."
-msgstr ""
+msgstr "Si l'utilisateur est un appareil ou un utilisateur réel."
 
-#: core/models.py:180
+#: core/models.py:184
 msgid "staff status"
-msgstr ""
+msgstr "statut du personnel"
 
-#: core/models.py:182
+#: core/models.py:186
 msgid "Whether the user can log into this admin site."
-msgstr ""
+msgstr "Si l'utilisateur peut se connecter à ce site d'administration."
 
-#: core/models.py:185
+#: core/models.py:189
 msgid "active"
-msgstr ""
+msgstr "actif"
 
-#: core/models.py:188
+#: core/models.py:192
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
 msgstr ""
+"Si cet utilisateur doit être traité comme actif. Désélectionnez cette option "
+"au lieu de supprimer des comptes."
 
-#: core/models.py:201
+#: core/models.py:205
 msgid "user"
-msgstr ""
+msgstr "utilisateur"
 
-#: core/models.py:202
+#: core/models.py:206
 msgid "users"
-msgstr ""
+msgstr "utilisateurs"
 
-#: core/models.py:261
+#: core/models.py:265
 msgid "Resource"
-msgstr ""
+msgstr "Ressource"
 
-#: core/models.py:262
+#: core/models.py:266
 msgid "Resources"
-msgstr ""
+msgstr "Ressources"
 
-#: core/models.py:316
+#: core/models.py:320
 msgid "Resource access"
-msgstr ""
+msgstr "Accès aux ressources"
 
-#: core/models.py:317
+#: core/models.py:321
 msgid "Resource accesses"
-msgstr ""
+msgstr "Accès aux ressources"
 
-#: core/models.py:323
+#: core/models.py:327
 msgid "Resource access with this User and Resource already exists."
 msgstr ""
+"L'accès à la ressource avec cet utilisateur et cette ressource existe déjà."
 
-#: core/models.py:379
+#: core/models.py:383
 msgid "Visio room configuration"
-msgstr ""
+msgstr "Configuration de la salle de visioconférence"
 
-#: core/models.py:380
+#: core/models.py:384
 msgid "Values for Visio parameters to configure the room."
-msgstr ""
+msgstr "Valeurs des paramètres de visioconférence pour configurer la salle."
 
-#: core/models.py:386 core/models.py:506
+#: core/models.py:391
+msgid "Room PIN code"
+msgstr "Code PIN de la salle"
+
+#: core/models.py:392
+msgid "Unique n-digit code that identifies this room in telephony mode."
+msgstr "Code unique à n chiffres qui identifie cette salle en mode téléphonique."
+
+#: core/models.py:398 core/models.py:552
 msgid "Room"
-msgstr ""
+msgstr "Salle"
 
-#: core/models.py:387
+#: core/models.py:399
 msgid "Rooms"
-msgstr ""
+msgstr "Salles"
 
-#: core/models.py:517
+#: core/models.py:563
 msgid "Worker ID"
-msgstr ""
+msgstr "ID du Worker"
 
-#: core/models.py:519
+#: core/models.py:565
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
 msgstr ""
+"Entrez un identifiant pour l'enregistrement du Worker. Cet identifiant "
+"est conservé même lorsque le Worker s'arrête, permettant un suivi "
+"facile."
 
-#: core/models.py:527
+#: core/models.py:573
 msgid "Recording mode"
-msgstr ""
+msgstr "Mode d'enregistrement"
 
-#: core/models.py:528
+#: core/models.py:574
 msgid "Defines the mode of recording being called."
-msgstr ""
+msgstr "Définit le mode d'enregistrement appelé."
 
-#: core/models.py:534
+#: core/models.py:580
 msgid "Recording"
-msgstr ""
+msgstr "Enregistrement"
 
-#: core/models.py:535
+#: core/models.py:581
 msgid "Recordings"
-msgstr ""
+msgstr "Enregistrements"
 
-#: core/models.py:592
+#: core/models.py:689
 msgid "Recording/user relation"
-msgstr ""
+msgstr "Relation enregistrement/utilisateur"
 
-#: core/models.py:593
+#: core/models.py:690
 msgid "Recording/user relations"
-msgstr ""
+msgstr "Relations enregistrement/utilisateur"
 
-#: core/models.py:599
+#: core/models.py:696
 msgid "This user is already in this recording."
-msgstr ""
+msgstr "Cet utilisateur est déjà dans cet enregistrement."
 
-#: core/models.py:605
+#: core/models.py:702
 msgid "This team is already in this recording."
-msgstr ""
+msgstr "Cette équipe est déjà dans cet enregistrement."
 
-#: core/models.py:611
+#: core/models.py:708
 msgid "Either user or team must be set, not both."
-msgstr ""
+msgstr "Soit l'utilisateur, soit l'équipe doit être défini, pas les deux."
 
-#: core/recording/event/authentication.py:58
-msgid "Authentication is enabled but token is not configured."
-msgstr ""
-
-#: core/recording/event/authentication.py:70
-msgid "Authorization header is required"
-msgstr ""
-
-#: core/recording/event/authentication.py:78
-msgid "Invalid authorization header."
-msgstr ""
-
-#: core/recording/event/authentication.py:88
-msgid "Invalid token"
-msgstr ""
-
-#: core/recording/event/notification.py:81
+#: core/recording/event/notification.py:94
 msgid "Your recording is ready"
-msgstr ""
+msgstr "Votre enregistrement est prêt"
 
-#: core/templates/mail/html/invitation.html:160
+#: core/services/invitation.py:44
+#, python-brace-format
+msgid "Video call in progress: {sender.email} is waiting for you to connect"
+msgstr "Appel vidéo en cours : {sender.email} attend que vous vous connectiez"
+
+#: core/templates/mail/html/invitation.html:159
+#: core/templates/mail/html/screen_recording.html:159
 #: core/templates/mail/text/invitation.txt:3
-msgid "La Suite Numérique"
-msgstr ""
+#: core/templates/mail/text/screen_recording.txt:3
+msgid "Logo email"
+msgstr "Logo email"
 
-#: core/templates/mail/html/invitation.html:190
+#: core/templates/mail/html/invitation.html:189
 #: core/templates/mail/text/invitation.txt:5
-msgid "Invitation to join a team"
-msgstr ""
+msgid "invites you to join an ongoing video call"
+msgstr "vous invite à rejoindre un appel vidéo en cours"
 
-#: core/templates/mail/html/invitation.html:198
-msgid "Welcome to <strong>Meet</strong>"
-msgstr ""
+#: core/templates/mail/html/invitation.html:200
+#: core/templates/mail/text/invitation.txt:7
+msgid "JOIN THE CALL"
+msgstr "REJOINDRE L'APPEL"
 
-#: core/templates/mail/html/invitation.html:216
-#: core/templates/mail/text/invitation.txt:12
-msgid "Logo"
-msgstr ""
-
-#: core/templates/mail/html/invitation.html:226
-#: core/templates/mail/text/invitation.txt:14
+#: core/templates/mail/html/invitation.html:227
+#: core/templates/mail/text/invitation.txt:13
 msgid ""
-"We are delighted to welcome you to our community on Meet, your new companion "
-"to collaborate on documents efficiently, intuitively, and securely."
+"If you can't click the button, copy and paste the URL into your browser to "
+"join the call."
 msgstr ""
+"Si vous ne pouvez pas cliquer sur le bouton, copiez et collez l'URL dans "
+"votre navigateur pour rejoindre l'appel."
 
-#: core/templates/mail/html/invitation.html:231
+#: core/templates/mail/html/invitation.html:235
 #: core/templates/mail/text/invitation.txt:15
-msgid ""
-"Our application is designed to help you organize, collaborate, and manage "
-"permissions."
-msgstr ""
-
-#: core/templates/mail/html/invitation.html:236
-#: core/templates/mail/text/invitation.txt:16
-msgid "With Meet, you will be able to:"
-msgstr ""
+msgid "Tips for a better experience:"
+msgstr "Conseils pour une meilleure expérience :"
 
 #: core/templates/mail/html/invitation.html:237
 #: core/templates/mail/text/invitation.txt:17
-msgid "Create documents."
-msgstr ""
+msgid "Use Chrome or Firefox for better call quality"
+msgstr "Utilisez Chrome ou Firefox pour une meilleure qualité d'appel"
 
 #: core/templates/mail/html/invitation.html:238
 #: core/templates/mail/text/invitation.txt:18
-msgid "Invite members of your document or community in just a few clicks."
-msgstr ""
+msgid "Test your microphone and camera before joining"
+msgstr "Testez votre microphone et votre caméra avant de rejoindre"
 
-#: core/templates/mail/html/invitation.html:249
-#: core/templates/mail/text/invitation.txt:20
-msgid "Visit Meet"
-msgstr ""
+#: core/templates/mail/html/invitation.html:239
+#: core/templates/mail/text/invitation.txt:19
+msgid "Make sure you have a stable internet connection"
+msgstr "Assurez-vous d'avoir une connexion Internet stable"
 
-#: core/templates/mail/html/invitation.html:258
-#: core/templates/mail/text/invitation.txt:22
-msgid ""
-"We are confident that Meet will help you increase efficiency and "
-"productivity while strengthening the bond among members."
-msgstr ""
-
-#: core/templates/mail/html/invitation.html:263
-#: core/templates/mail/text/invitation.txt:23
-msgid ""
-"Feel free to explore all the features of the application and share your "
-"feedback and suggestions with us. Your feedback is valuable to us and will "
-"enable us to continually improve our service."
-msgstr ""
-
-#: core/templates/mail/html/invitation.html:268
-#: core/templates/mail/text/invitation.txt:24
-msgid ""
-"Once again, welcome aboard! We are eager to accompany you on you "
-"collaboration adventure."
-msgstr ""
-
-#: core/templates/mail/html/invitation.html:275
-#: core/templates/mail/text/invitation.txt:26
-msgid "Sincerely,"
-msgstr ""
-
-#: core/templates/mail/html/invitation.html:276
-#: core/templates/mail/text/invitation.txt:28
-msgid "The La Suite Numérique Team"
-msgstr ""
-
-#: core/templates/mail/html/screen_recording.html:159
-#: core/templates/mail/text/screen_recording.txt:3
-msgid "Logo email"
-msgstr ""
+#: core/templates/mail/html/invitation.html:248
+#: core/templates/mail/html/screen_recording.html:240
+#: core/templates/mail/text/invitation.txt:21
+#: core/templates/mail/text/screen_recording.txt:22
+#, python-format
+msgid " Thank you for using %(brandname)s. "
+msgstr " Merci d'utiliser %(brandname)s. "
 
 #: core/templates/mail/html/screen_recording.html:188
 #: core/templates/mail/text/screen_recording.txt:6
 msgid "Your recording is ready!"
-msgstr ""
+msgstr "Votre enregistrement est prêt !"
 
 #: core/templates/mail/html/screen_recording.html:195
 #: core/templates/mail/text/screen_recording.txt:8
@@ -415,31 +378,39 @@ msgid ""
 " Your recording of \"%(room_name)s\" on %(recording_date)s at "
 "%(recording_time)s is now ready to download. "
 msgstr ""
+" Votre enregistrement de \"%(room_name)s\" du %(recording_date)s à "
+"%(recording_time)s est maintenant prêt à être téléchargé. "
+
+#: core/templates/mail/html/screen_recording.html:195
+#: core/templates/mail/text/screen_recording.txt:8
+#, python-format
+msgid " The recording will expire in %(days)s days. "
+msgstr " L'enregistrement expirera dans %(days)s jours. "
 
 #: core/templates/mail/html/screen_recording.html:201
 #: core/templates/mail/text/screen_recording.txt:10
 msgid "To keep this recording permanently:"
-msgstr ""
+msgstr "Pour conserver cet enregistrement de façon permanente :"
 
 #: core/templates/mail/html/screen_recording.html:203
 #: core/templates/mail/text/screen_recording.txt:12
-msgid "Click the \\"
-msgstr ""
+msgid "Click the \"Open\" button below "
+msgstr "Cliquez sur le bouton \"Ouvrir\" ci-dessous "
 
 #: core/templates/mail/html/screen_recording.html:204
 #: core/templates/mail/text/screen_recording.txt:13
-msgid "Use the \\"
-msgstr ""
+msgid "Use the \"Download\" button in the interface "
+msgstr "Utilisez le bouton \"Télécharger\" dans l'interface "
 
 #: core/templates/mail/html/screen_recording.html:205
 #: core/templates/mail/text/screen_recording.txt:14
 msgid "Save the file to your preferred location"
-msgstr ""
+msgstr "Enregistrez le fichier à l'emplacement de votre choix"
 
 #: core/templates/mail/html/screen_recording.html:216
 #: core/templates/mail/text/screen_recording.txt:16
 msgid "Open"
-msgstr ""
+msgstr "Ouvrir"
 
 #: core/templates/mail/html/screen_recording.html:225
 #: core/templates/mail/text/screen_recording.txt:18
@@ -448,21 +419,21 @@ msgid ""
 " If you have any questions or need assistance, please contact our support "
 "team at %(support_email)s. "
 msgstr ""
-
-#: core/templates/mail/html/screen_recording.html:240
-#: core/templates/mail/text/screen_recording.txt:22
-#, python-format
-msgid " Thank you for using %(brandname)s. "
-msgstr ""
-
-#: core/templates/mail/text/invitation.txt:8
-msgid "Welcome to Meet"
-msgstr ""
-
-#: meet/settings.py:161
-msgid "English"
-msgstr ""
+" Si vous avez des questions ou besoin d'assistance, veuillez contacter notre "
+"équipe d'assistance à %(support_email)s. "
 
 #: meet/settings.py:162
+msgid "English"
+msgstr "Anglais"
+
+#: meet/settings.py:163
 msgid "French"
-msgstr ""
+msgstr "Français"
+
+#: meet/settings.py:164
+msgid "Dutch"
+msgstr "Néerlandais"
+
+#: meet/settings.py:165
+msgid "German"
+msgstr "Allemand"

src/backend/locale/nl_NL/LC_MESSAGES/django.po

@@ -0,0 +1,433 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2025-05-16 17:04+0000\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#: core/admin.py:26
+msgid "Personal info"
+msgstr "Persoonlijke informatie"
+
+#: core/admin.py:39
+msgid "Permissions"
+msgstr "Rechten"
+
+#: core/admin.py:51
+msgid "Important dates"
+msgstr "Belangrijke datums"
+
+#: core/api/serializers.py:63
+msgid "You must be administrator or owner of a room to add accesses to it."
+msgstr ""
+"Je moet beheerder of eigenaar van een ruimte zijn om toegang toe te voegen."
+
+#: core/models.py:31
+msgid "Member"
+msgstr "Lid"
+
+#: core/models.py:32
+msgid "Administrator"
+msgstr "Beheerder"
+
+#: core/models.py:33
+msgid "Owner"
+msgstr "Eigenaar"
+
+#: core/models.py:49
+msgid "Initiated"
+msgstr "Gestart"
+
+#: core/models.py:50
+msgid "Active"
+msgstr "Actief"
+
+#: core/models.py:51
+msgid "Stopped"
+msgstr "Gestopt"
+
+#: core/models.py:52
+msgid "Saved"
+msgstr "Opgeslagen"
+
+#: core/models.py:53
+msgid "Aborted"
+msgstr "Afgebroken"
+
+#: core/models.py:54
+msgid "Failed to Start"
+msgstr "Starten mislukt"
+
+#: core/models.py:55
+msgid "Failed to Stop"
+msgstr "Stoppen mislukt"
+
+#: core/models.py:56
+msgid "Notification succeeded"
+msgstr "Notificatie geslaagd"
+
+#: core/models.py:83
+msgid "SCREEN_RECORDING"
+msgstr "SCHERM_OPNAME"
+
+#: core/models.py:84
+msgid "TRANSCRIPT"
+msgstr "TRANSCRIPT"
+
+#: core/models.py:90
+msgid "Public Access"
+msgstr "Openbare toegang"
+
+#: core/models.py:91
+msgid "Trusted Access"
+msgstr "Vertrouwde toegang"
+
+#: core/models.py:92
+msgid "Restricted Access"
+msgstr "Beperkte toegang"
+
+#: core/models.py:104
+msgid "id"
+msgstr "id"
+
+#: core/models.py:105
+msgid "primary key for the record as UUID"
+msgstr "primaire sleutel voor het record als UUID"
+
+#: core/models.py:111
+msgid "created on"
+msgstr "aangemaakt op"
+
+#: core/models.py:112
+msgid "date and time at which a record was created"
+msgstr "datum en tijd waarop een record werd aangemaakt"
+
+#: core/models.py:117
+msgid "updated on"
+msgstr "bijgewerkt op"
+
+#: core/models.py:118
+msgid "date and time at which a record was last updated"
+msgstr "datum en tijd waarop een record voor het laatst werd bijgewerkt"
+
+#: core/models.py:138
+msgid ""
+"Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
+"_ characters."
+msgstr ""
+"Voer een geldige sub in. Deze waarde mag alleen letters, cijfers en @/./+/-/"
+"_ tekens bevatten."
+
+#: core/models.py:144
+msgid "sub"
+msgstr "sub"
+
+#: core/models.py:146
+msgid ""
+"Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_ "
+"characters only."
+msgstr ""
+"Vereist. 255 tekens of minder. Alleen letters, cijfers en @/./+/-/_ tekens."
+
+#: core/models.py:154
+msgid "identity email address"
+msgstr "identiteit e-mailadres"
+
+#: core/models.py:159
+msgid "admin email address"
+msgstr "beheerder e-mailadres"
+
+#: core/models.py:161
+msgid "full name"
+msgstr "volledige naam"
+
+#: core/models.py:163
+msgid "short name"
+msgstr "korte naam"
+
+#: core/models.py:169
+msgid "language"
+msgstr "taal"
+
+#: core/models.py:170
+msgid "The language in which the user wants to see the interface."
+msgstr "De taal waarin de gebruiker de interface wil zien."
+
+#: core/models.py:176
+msgid "The timezone in which the user wants to see times."
+msgstr "De tijdzone waarin de gebruiker tijden wil zien."
+
+#: core/models.py:179
+msgid "device"
+msgstr "apparaat"
+
+#: core/models.py:181
+msgid "Whether the user is a device or a real user."
+msgstr "Of de gebruiker een apparaat is of een echte gebruiker."
+
+#: core/models.py:184
+msgid "staff status"
+msgstr "personeelsstatus"
+
+#: core/models.py:186
+msgid "Whether the user can log into this admin site."
+msgstr "Of de gebruiker kan inloggen op deze beheersite."
+
+#: core/models.py:189
+msgid "active"
+msgstr "actief"
+
+#: core/models.py:192
+msgid ""
+"Whether this user should be treated as active. Unselect this instead of "
+"deleting accounts."
+msgstr ""
+"Of deze gebruiker als actief moet worden behandeld. Deselecteer dit in "
+"plaats van accounts te verwijderen."
+
+#: core/models.py:205
+msgid "user"
+msgstr "gebruiker"
+
+#: core/models.py:206
+msgid "users"
+msgstr "gebruikers"
+
+#: core/models.py:265
+msgid "Resource"
+msgstr "Bron"
+
+#: core/models.py:266
+msgid "Resources"
+msgstr "Bronnen"
+
+#: core/models.py:320
+msgid "Resource access"
+msgstr "Brontoegang"
+
+#: core/models.py:321
+msgid "Resource accesses"
+msgstr "Brontoegangsrechten"
+
+#: core/models.py:327
+msgid "Resource access with this User and Resource already exists."
+msgstr "Brontoegang met deze gebruiker en bron bestaat al."
+
+#: core/models.py:383
+msgid "Visio room configuration"
+msgstr "Visio-ruimteconfiguratie"
+
+#: core/models.py:384
+msgid "Values for Visio parameters to configure the room."
+msgstr "Waarden voor Visio-parameters om de ruimte te configureren."
+
+#: core/models.py:391
+msgid "Room PIN code"
+msgstr "Pincode van de kamer"
+
+#: core/models.py:392
+msgid "Unique n-digit code that identifies this room in telephony mode."
+msgstr "Unieke n-cijferige code die deze kamer identificeert in telefonie-modus."
+
+#: core/models.py:398 core/models.py:552
+msgid "Room"
+msgstr "Ruimte"
+
+#: core/models.py:399
+msgid "Rooms"
+msgstr "Ruimtes"
+
+#: core/models.py:563
+msgid "Worker ID"
+msgstr "Worker ID"
+
+#: core/models.py:565
+msgid ""
+"Enter an identifier for the worker recording.This ID is retained even when "
+"the worker stops, allowing for easy tracking."
+msgstr ""
+"Voer een identificatie in voor de worker-opname. Deze ID blijft behouden, "
+"zelfs wanneer de worker stopt, waardoor eenvoudige tracking mogelijk is."
+
+#: core/models.py:573
+msgid "Recording mode"
+msgstr "Opnamemodus"
+
+#: core/models.py:574
+msgid "Defines the mode of recording being called."
+msgstr "Definieert de modus van opname die wordt aangeroepen."
+
+#: core/models.py:580
+msgid "Recording"
+msgstr "Opname"
+
+#: core/models.py:581
+msgid "Recordings"
+msgstr "Opnames"
+
+#: core/models.py:689
+msgid "Recording/user relation"
+msgstr "Opname/gebruiker-relatie"
+
+#: core/models.py:690
+msgid "Recording/user relations"
+msgstr "Opname/gebruiker-relaties"
+
+#: core/models.py:696
+msgid "This user is already in this recording."
+msgstr "Deze gebruiker is al in deze opname."
+
+#: core/models.py:702
+msgid "This team is already in this recording."
+msgstr "Dit team is al in deze opname."
+
+#: core/models.py:708
+msgid "Either user or team must be set, not both."
+msgstr "Ofwel gebruiker of team moet worden ingesteld, niet beide."
+
+#: core/recording/event/notification.py:94
+msgid "Your recording is ready"
+msgstr "Je opname is klaar"
+
+#: core/services/invitation.py:44
+#, python-brace-format
+msgid "Video call in progress: {sender.email} is waiting for you to connect"
+msgstr "Video-oproep bezig: {sender.email} wacht op je verbinding"
+
+#: core/templates/mail/html/invitation.html:159
+#: core/templates/mail/html/screen_recording.html:159
+#: core/templates/mail/text/invitation.txt:3
+#: core/templates/mail/text/screen_recording.txt:3
+msgid "Logo email"
+msgstr "Logo e-mail"
+
+#: core/templates/mail/html/invitation.html:189
+#: core/templates/mail/text/invitation.txt:5
+msgid "invites you to join an ongoing video call"
+msgstr "nodigt je uit om deel te nemen aan een lopende video-oproep"
+
+#: core/templates/mail/html/invitation.html:200
+#: core/templates/mail/text/invitation.txt:7
+msgid "JOIN THE CALL"
+msgstr "NEEM DEEL AAN DE OPROEP"
+
+#: core/templates/mail/html/invitation.html:227
+#: core/templates/mail/text/invitation.txt:13
+msgid ""
+"If you can't click the button, copy and paste the URL into your browser to "
+"join the call."
+msgstr ""
+"Als je niet op de knop kunt klikken, kopieer en plak dan de URL in je "
+"browser om deel te nemen aan de oproep."
+
+#: core/templates/mail/html/invitation.html:235
+#: core/templates/mail/text/invitation.txt:15
+msgid "Tips for a better experience:"
+msgstr "Tips voor een betere ervaring:"
+
+#: core/templates/mail/html/invitation.html:237
+#: core/templates/mail/text/invitation.txt:17
+msgid "Use Chrome or Firefox for better call quality"
+msgstr "Gebruik Chrome of Firefox voor betere gesprekskwaliteit"
+
+#: core/templates/mail/html/invitation.html:238
+#: core/templates/mail/text/invitation.txt:18
+msgid "Test your microphone and camera before joining"
+msgstr "Test je microfoon en camera voordat je deelneemt"
+
+#: core/templates/mail/html/invitation.html:239
+#: core/templates/mail/text/invitation.txt:19
+msgid "Make sure you have a stable internet connection"
+msgstr "Zorg ervoor dat je een stabiele internetverbinding hebt"
+
+#: core/templates/mail/html/invitation.html:248
+#: core/templates/mail/html/screen_recording.html:240
+#: core/templates/mail/text/invitation.txt:21
+#: core/templates/mail/text/screen_recording.txt:22
+#, python-format
+msgid " Thank you for using %(brandname)s. "
+msgstr " Bedankt voor het gebruik van %(brandname)s. "
+
+#: core/templates/mail/html/screen_recording.html:188
+#: core/templates/mail/text/screen_recording.txt:6
+msgid "Your recording is ready!"
+msgstr "Je opname is klaar!"
+
+#: core/templates/mail/html/screen_recording.html:195
+#: core/templates/mail/text/screen_recording.txt:8
+#, python-format
+msgid ""
+" Your recording of \"%(room_name)s\" on %(recording_date)s at "
+"%(recording_time)s is now ready to download. "
+msgstr ""
+" Je opname van \"%(room_name)s\" op %(recording_date)s om %(recording_time)s "
+"is nu klaar om te downloaden. "
+
+#: core/templates/mail/html/screen_recording.html:195
+#: core/templates/mail/text/screen_recording.txt:8
+#, python-format
+msgid " The recording will expire in %(days)s days. "
+msgstr " De opname verloopt over %(days)s dagen. "
+
+#: core/templates/mail/html/screen_recording.html:201
+#: core/templates/mail/text/screen_recording.txt:10
+msgid "To keep this recording permanently:"
+msgstr "Om deze opname permanent te bewaren:"
+
+#: core/templates/mail/html/screen_recording.html:203
+#: core/templates/mail/text/screen_recording.txt:12
+msgid "Click the \"Open\" button below "
+msgstr "Klik op de \"Openen\"-knop hieronder "
+
+#: core/templates/mail/html/screen_recording.html:204
+#: core/templates/mail/text/screen_recording.txt:13
+msgid "Use the \"Download\" button in the interface "
+msgstr "Gebruik de \"Download\"-knop in de interface "
+
+#: core/templates/mail/html/screen_recording.html:205
+#: core/templates/mail/text/screen_recording.txt:14
+msgid "Save the file to your preferred location"
+msgstr "Sla het bestand op naar je gewenste locatie"
+
+#: core/templates/mail/html/screen_recording.html:216
+#: core/templates/mail/text/screen_recording.txt:16
+msgid "Open"
+msgstr "Openen"
+
+#: core/templates/mail/html/screen_recording.html:225
+#: core/templates/mail/text/screen_recording.txt:18
+#, python-format
+msgid ""
+" If you have any questions or need assistance, please contact our support "
+"team at %(support_email)s. "
+msgstr ""
+" Als je vragen hebt of hulp nodig hebt, neem dan contact op met ons support "
+"team via %(support_email)s. "
+
+#: meet/settings.py:162
+msgid "English"
+msgstr "Engels"
+
+#: meet/settings.py:163
+msgid "French"
+msgstr "Frans"
+
+#: meet/settings.py:164
+msgid "Dutch"
+msgstr "Nederlands"
+
+#: meet/settings.py:165
+msgid "German"
+msgstr "Duits"

src/backend/meet/settings.py

@@ -23,7 +23,6 @@ from sentry_sdk.integrations.logging import ignore_logger
 
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
 BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
-DATA_DIR = os.path.join("/", "data")
 
 
 def get_release():
@@ -70,6 +69,8 @@ class Base(Configuration):
 
     API_VERSION = "v1.0"
 
+    DATA_DIR = values.Value(os.path.join("/", "data"), environ_name="DATA_DIR")
+
     # Security
     ALLOWED_HOSTS = values.ListValue([])
     SECRET_KEY = values.Value(None)
@@ -160,6 +161,8 @@ class Base(Configuration):
         (
             ("en-us", _("English")),
             ("fr-fr", _("French")),
+            ("nl-nl", _("Dutch")),
+            ("de-de", _("German")),
         )
     )
 
@@ -261,6 +264,9 @@ class Base(Configuration):
             "rest_framework.parsers.JSONParser",
             "nested_multipart_parser.drf.DrfNestedParser",
         ],
+        "DEFAULT_RENDERER_CLASSES": [
+            "rest_framework.renderers.JSONRenderer",
+        ],
         "EXCEPTION_HANDLER": "core.api.exception_handler",
         "DEFAULT_PAGINATION_CLASS": "rest_framework.pagination.PageNumberPagination",
         "PAGE_SIZE": 20,
@@ -307,6 +313,12 @@ class Base(Configuration):
         "silence_livekit_debug_logs": values.BooleanValue(
             False, environ_name="FRONTEND_SILENCE_LIVEKIT_DEBUG", environ_prefix=None
         ),
+        "is_silent_login_enabled": values.BooleanValue(
+            True, environ_name="FRONTEND_IS_SILENT_LOGING_ENABLED", environ_prefix=None
+        ),
+        "feedback": values.DictValue(
+            {}, environ_name="FRONTEND_FEEDBACK", environ_prefix=None
+        ),
     }
 
     # Mail
@@ -322,6 +334,7 @@ class Base(Configuration):
     EMAIL_SUPPORT_EMAIL = values.Value(None)
     EMAIL_LOGO_IMG = values.Value(None)
     EMAIL_DOMAIN = values.Value(None)
+    EMAIL_APP_BASE_URL = values.Value(None)
 
     AUTH_USER_MODEL = "core.User"
 
@@ -350,8 +363,8 @@ class Base(Configuration):
     SESSION_COOKIE_AGE = 60 * 60 * 12
 
     # OIDC - Authorization Code Flow
-    OIDC_AUTHENTICATE_CLASS = "core.authentication.views.OIDCAuthenticationRequestView"
-    OIDC_CALLBACK_CLASS = "core.authentication.views.OIDCAuthenticationCallbackView"
+    OIDC_AUTHENTICATE_CLASS = "lasuite.oidc_login.views.OIDCAuthenticationRequestView"
+    OIDC_CALLBACK_CLASS = "lasuite.oidc_login.views.OIDCAuthenticationCallbackView"
     OIDC_CREATE_USER = values.BooleanValue(
         default=True, environ_name="OIDC_CREATE_USER", environ_prefix=None
     )
@@ -385,6 +398,9 @@ class Base(Configuration):
     OIDC_OP_USER_ENDPOINT = values.Value(
         None, environ_name="OIDC_OP_USER_ENDPOINT", environ_prefix=None
     )
+    OIDC_OP_USER_ENDPOINT_FORMAT = values.Value(
+        "AUTO", environ_name="OIDC_OP_USER_ENDPOINT_FORMAT", environ_prefix=None
+    )
     OIDC_OP_LOGOUT_ENDPOINT = values.Value(
         None, environ_name="OIDC_OP_LOGOUT_ENDPOINT", environ_prefix=None
     )
@@ -431,6 +447,11 @@ class Base(Configuration):
         environ_name="OIDC_USERINFO_SHORTNAME_FIELD",
         environ_prefix=None,
     )
+    OIDC_USERINFO_ESSENTIAL_CLAIMS = values.ListValue(
+        default=[],
+        environ_name="OIDC_USERINFO_ESSENTIAL_CLAIMS",
+        environ_prefix=None,
+    )
 
     # Video conference configuration
     LIVEKIT_CONFIGURATION = {
@@ -440,6 +461,9 @@ class Base(Configuration):
         ),
         "url": values.Value(environ_name="LIVEKIT_API_URL", environ_prefix=None),
     }
+    LIVEKIT_VERIFY_SSL = values.BooleanValue(
+        True, environ_name="LIVEKIT_VERIFY_SSL", environ_prefix=None
+    )
     RESOURCE_DEFAULT_ACCESS_LEVEL = values.Value(
         "public", environ_name="RESOURCE_DEFAULT_ACCESS_LEVEL", environ_prefix=None
     )
@@ -454,9 +478,6 @@ class Base(Configuration):
     RECORDING_OUTPUT_FOLDER = values.Value(
         "recordings", environ_name="RECORDING_OUTPUT_FOLDER", environ_prefix=None
     )
-    RECORDING_VERIFY_SSL = values.BooleanValue(
-        True, environ_name="RECORDING_VERIFY_SSL", environ_prefix=None
-    )
     RECORDING_WORKER_CLASSES = values.DictValue(
         {
             "screen_recording": "core.recording.worker.services.VideoCompositeEgressService",
@@ -479,6 +500,11 @@ class Base(Configuration):
     RECORDING_STORAGE_EVENT_TOKEN = values.Value(
         None, environ_name="RECORDING_STORAGE_EVENT_TOKEN", environ_prefix=None
     )
+    # Number of days before recordings expire - must be synced with bucket lifecycle policy
+    # Set to None for no expiration
+    RECORDING_EXPIRATION_DAYS = values.IntegerValue(
+        None, environ_name="RECORDING_EXPIRATION_DAYS", environ_prefix=None
+    )
     SUMMARY_SERVICE_ENDPOINT = values.Value(
         None, environ_name="SUMMARY_SERVICE_ENDPOINT", environ_prefix=None
     )
@@ -486,7 +512,7 @@ class Base(Configuration):
         None, environ_name="SUMMARY_SERVICE_API_TOKEN", environ_prefix=None
     )
     SCREEN_RECORDING_BASE_URL = values.Value(
-        None, environ_name="SUMMARY_SERVICE_API_TOKEN", environ_prefix=None
+        None, environ_name="SCREEN_RECORDING_BASE_URL", environ_prefix=None
     )
 
     # Marketing and communication settings
@@ -547,6 +573,23 @@ class Base(Configuration):
         environ_prefix=None,
     )
 
+    # SIP Telephony
+    ROOM_TELEPHONY_ENABLED = values.BooleanValue(
+        False,
+        environ_name="ROOM_TELEPHONY_ENABLED",
+        environ_prefix=None,
+    )
+    ROOM_TELEPHONY_PIN_LENGTH = values.PositiveIntegerValue(
+        10,
+        environ_name="ROOM_TELEPHONY_PIN_LENGTH",
+        environ_prefix=None,
+    )
+    ROOM_TELEPHONY_PIN_MAX_RETRIES = values.PositiveIntegerValue(
+        5,
+        environ_name="ROOM_TELEPHONY_PIN_MAX_RETRIES",
+        environ_prefix=None,
+    )
+
     # pylint: disable=invalid-name
     @property
     def ENVIRONMENT(self):

src/backend/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "meet"
-version = "0.1.18"
+version = "0.1.22"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
     "Development Status :: 5 - Production/Stable",
@@ -32,12 +32,13 @@ dependencies = [
     "django-configurations==2.5.1",
     "django-cors-headers==4.7.0",
     "django-countries==7.6.1",
+    "django-lasuite==0.0.7",
     "django-parler==2.3",
     "redis==5.2.1",
     "django-redis==5.4.0",
     "django-storages[s3]==1.14.5",
     "django-timezone-field>=5.1",
-    "django==5.1.8",
+    "django==5.1.9",
     "djangorestframework==3.15.2",
     "drf_spectacular==0.28.0",
     "dockerflow==2024.4.2",
@@ -55,7 +56,7 @@ dependencies = [
     "sentry-sdk==2.24.1",
     "whitenoise==6.9.0",
     "mozilla-django-oidc==4.0.1",
-    "livekit-api==0.8.2",
+    "livekit-api==1.0.2",
     "aiohttp==3.11.14",
 ]
 

src/frontend/package.json

@@ -1,7 +1,7 @@
 {
   "name": "meet",
   "private": true,
-  "version": "0.1.18",
+  "version": "0.1.22",
   "type": "module",
   "scripts": {
     "dev": "panda codegen && vite",
@@ -13,48 +13,48 @@
     "check": "prettier --check ./src"
   },
   "dependencies": {
-    "@livekit/components-react": "2.8.1",
-    "@livekit/components-styles": "1.1.4",
-    "@livekit/track-processors": "0.3.3",
-    "@pandacss/preset-panda": "0.53.3",
-    "@react-aria/toast": "3.0.1",
+    "@livekit/components-react": "2.9.3",
+    "@livekit/components-styles": "1.1.5",
+    "@livekit/track-processors": "0.5.6",
+    "@pandacss/preset-panda": "0.53.6",
+    "@react-aria/toast": "3.0.2",
     "@remixicon/react": "4.6.0",
-    "@tanstack/react-query": "5.69.0",
+    "@tanstack/react-query": "5.76.0",
     "crisp-sdk-web": "1.0.25",
     "hoofd": "1.7.3",
-    "i18next": "24.2.3",
-    "i18next-browser-languagedetector": "8.0.4",
+    "i18next": "25.1.2",
+    "i18next-browser-languagedetector": "8.1.0",
     "i18next-parser": "9.3.0",
     "i18next-resources-to-backend": "1.2.1",
-    "livekit-client": "2.9.8",
-    "posthog-js": "1.232.6",
+    "livekit-client": "2.11.4",
+    "posthog-js": "1.240.6",
     "react": "18.3.1",
-    "react-aria-components": "1.7.1",
+    "react-aria-components": "1.8.0",
     "react-dom": "18.3.1",
     "react-i18next": "15.1.1",
     "use-sound": "5.0.0",
-    "valtio": "2.1.4",
-    "wouter": "3.6.0"
+    "valtio": "2.1.5",
+    "wouter": "3.7.0"
   },
   "devDependencies": {
-    "@pandacss/dev": "0.53.3",
-    "@tanstack/eslint-plugin-query": "5.68.0",
-    "@tanstack/react-query-devtools": "5.69.0",
-    "@types/node": "22.13.13",
+    "@pandacss/dev": "0.53.6",
+    "@tanstack/eslint-plugin-query": "5.74.7",
+    "@tanstack/react-query-devtools": "5.76.0",
+    "@types/node": "22.15.17",
     "@types/react": "18.3.12",
     "@types/react-dom": "18.3.1",
-    "@typescript-eslint/eslint-plugin": "8.28.0",
-    "@typescript-eslint/parser": "8.28.0",
-    "@vitejs/plugin-react": "4.3.4",
+    "@typescript-eslint/eslint-plugin": "8.32.0",
+    "@typescript-eslint/parser": "8.32.0",
+    "@vitejs/plugin-react": "4.4.1",
     "eslint": "8.57.0",
-    "eslint-config-prettier": "10.1.1",
+    "eslint-config-prettier": "10.1.5",
     "eslint-plugin-jsx-a11y": "6.10.2",
     "eslint-plugin-react-hooks": "5.2.0",
-    "eslint-plugin-react-refresh": "0.4.19",
+    "eslint-plugin-react-refresh": "0.4.20",
     "postcss": "8.5.3",
     "prettier": "3.5.3",
-    "typescript": "5.8.2",
-    "vite": "6.2.4",
+    "typescript": "5.8.3",
+    "vite": "6.2.7",
     "vite-tsconfig-paths": "5.1.4"
   }
 }

src/frontend/panda.config.ts

@@ -397,6 +397,12 @@ const config: Config = {
           lineHeight: '1.25rem',
         },
       },
+      xs: {
+        value: {
+          fontSize: '0.825rem',
+          lineHeight: '1.15rem',
+        },
+      },
       badge: {
         value: {
           fontSize: '0.75rem',

src/frontend/src/App.tsx

@@ -13,14 +13,17 @@ import { routes } from './routes'
 import './i18n/init'
 import { queryClient } from '@/api/queryClient'
 import { AppInitialization } from '@/components/AppInitialization'
+import { useIsSdkContext } from '@/features/sdk/hooks/useIsSdkContext'
 
 function App() {
   const { i18n } = useTranslation()
   useLang(i18n.language)
 
+  const isSDKContext = useIsSdkContext()
+
   return (
     <QueryClientProvider client={queryClient}>
-      <AppInitialization />
+      {!isSDKContext && <AppInitialization />}
       <Suspense fallback={null}>
         <I18nProvider locale={i18n.language}>
           <Layout>

src/frontend/src/api/mediaUrl.ts

@@ -0,0 +1,11 @@
+export const mediaUrl = (path: string) => {
+  const origin =
+    import.meta.env.VITE_API_BASE_URL ||
+    (typeof window !== 'undefined' ? window.location.origin : '')
+
+  // Remove leading/trailing slashes from origin/path if it exists
+  const sanitizedOrigin = origin.replace(/\/$/, '')
+  const sanitizedPath = path.replace(/^\//, '')
+
+  return `${sanitizedOrigin}/media/${sanitizedPath}`
+}

src/frontend/src/api/useConfig.ts

@@ -11,10 +11,15 @@ export interface ApiConfig {
   support?: {
     id: string
   }
+  feedback: {
+    url: string
+  }
   silence_livekit_debug_logs?: boolean
+  is_silent_login_enabled?: boolean
   recording?: {
     is_enabled?: boolean
     available_modes?: RecordingMode[]
+    expiration_days?: number
   }
 }
 

src/frontend/src/components/AppInitialization.tsx

@@ -2,13 +2,9 @@ import { silenceLiveKitLogs } from '@/utils/livekit'
 import { useConfig } from '@/api/useConfig'
 import { useAnalytics } from '@/features/analytics/hooks/useAnalytics'
 import { useSupport } from '@/features/support/hooks/useSupport'
-import { useLocation } from 'wouter'
-
-const SDK_BASE_ROUTE = '/sdk'
 
 export const AppInitialization = () => {
   const { data } = useConfig()
-  const [location] = useLocation()
 
   const {
     analytics = {},
@@ -16,10 +12,8 @@ export const AppInitialization = () => {
     silence_livekit_debug_logs = false,
   } = data || {}
 
-  const isSDKContext = location.includes(SDK_BASE_ROUTE)
-
-  useAnalytics({ ...analytics, isDisabled: isSDKContext })
-  useSupport({ ...support, isDisabled: isSDKContext })
+  useAnalytics(analytics)
+  useSupport(support)
 
   silenceLiveKitLogs(silence_livekit_debug_logs)
 

src/frontend/src/components/FeedbackBanner.tsx

@@ -2,10 +2,14 @@ import { css } from '@/styled-system/css'
 import { RiErrorWarningLine, RiExternalLinkLine } from '@remixicon/react'
 import { useTranslation } from 'react-i18next'
 import { Text, A } from '@/primitives'
-import { GRIST_FEEDBACKS_FORM } from '@/utils/constants'
+import { useConfig } from '@/api/useConfig'
 
 export const FeedbackBanner = () => {
   const { t } = useTranslation()
+  const { data } = useConfig()
+
+  if (!data?.feedback?.url) return
+
   return (
     <div
       className={css({
@@ -35,7 +39,7 @@ export const FeedbackBanner = () => {
             gap: 0.25,
           })}
         >
-          <A href={GRIST_FEEDBACKS_FORM} target="_blank" size="sm">
+          <A href={data?.feedback?.url} target="_blank" size="sm">
             {t('feedback.cta')}
           </A>
           <RiExternalLinkLine size={16} aria-hidden="true" />

src/frontend/src/features/auth/api/ApiUser.ts

@@ -1,6 +1,10 @@
+import { BackendLanguage } from '@/utils/languages'
+
 export type ApiUser = {
   id: string
   email: string
   full_name: string
   last_name: string
+  language: BackendLanguage
+  timezone: string
 }

src/frontend/src/features/auth/api/fetchUser.ts

@@ -26,7 +26,7 @@ export const fetchUser = (
           // make sure to not resolve the promise while trying to silent login
           // so that consumers of fetchUser don't think the work already ended
           if (opts.attemptSilent && canAttemptSilentLogin()) {
-            attemptSilentLogin(300)
+            attemptSilentLogin(30)
           } else {
             resolve(false)
           }

src/frontend/src/features/auth/api/updateUserPreferences.ts

@@ -0,0 +1,15 @@
+import { type ApiUser } from './ApiUser'
+import { fetchApi } from '@/api/fetchApi'
+
+export type ApiUserPreferences = Pick<ApiUser, 'id' | 'timezone' | 'language'>
+
+export const updateUserPreferences = async ({
+  user,
+}: {
+  user: ApiUserPreferences
+}): Promise<ApiUser> => {
+  return await fetchApi(`/users/${user.id}/`, {
+    method: 'PUT',
+    body: JSON.stringify({ timezone: user.timezone, language: user.language }),
+  })
+}

src/frontend/src/features/auth/api/useSyncUserPreferencesWithBackend.tsx

@@ -0,0 +1,47 @@
+import { useMutation } from '@tanstack/react-query'
+import { keys } from '@/api/queryKeys'
+import { useEffect } from 'react'
+import { useTranslation } from 'react-i18next'
+import { queryClient } from '@/api/queryClient'
+import { updateUserPreferences } from './updateUserPreferences'
+import { convertToBackendLanguage } from '@/utils/languages'
+import { useUser } from './useUser'
+
+/**
+ * Hook that synchronizes user browser preferences (language, timezone) with backend user settings.
+ * Automatically updates backend when browser settings change for logged-in users.
+ */
+export const useSyncUserPreferencesWithBackend = () => {
+  const { i18n } = useTranslation()
+  const { user, isLoggedIn } = useUser()
+
+  const { mutateAsync } = useMutation({
+    mutationFn: updateUserPreferences,
+    onSuccess: (updatedUser) => {
+      queryClient.setQueryData([keys.user], updatedUser)
+    },
+  })
+
+  useEffect(() => {
+    if (!user || !isLoggedIn) return
+
+    const syncBrowserPreferencesToBackend = async () => {
+      const currentTimezone = Intl.DateTimeFormat().resolvedOptions().timeZone
+      const currentLanguage = convertToBackendLanguage(i18n.language)
+      if (
+        currentLanguage !== user.language ||
+        currentTimezone !== user.timezone
+      ) {
+        await mutateAsync({
+          user: {
+            id: user.id,
+            timezone: currentTimezone,
+            language: currentLanguage,
+          },
+        })
+      }
+    }
+
+    syncBrowserPreferencesToBackend()
+  }, [i18n.language, isLoggedIn, user, mutateAsync])
+}

src/frontend/src/features/auth/api/useUser.tsx

@@ -2,7 +2,7 @@ import { useQuery } from '@tanstack/react-query'
 import { keys } from '@/api/queryKeys'
 import { fetchUser } from './fetchUser'
 import { type ApiUser } from './ApiUser'
-import { useEffect } from 'react'
+import { useEffect, useMemo } from 'react'
 import {
   startAnalyticsSession,
   terminateAnalyticsSession,
@@ -12,6 +12,7 @@ import {
   terminateSupportSession,
 } from '@/features/support/hooks/useSupport'
 import { logoutUrl } from '../utils/logoutUrl'
+import { useConfig } from '@/api/useConfig'
 
 /**
  * returns info about currently logged-in user
@@ -23,11 +24,25 @@ export const useUser = (
     fetchUserOptions?: Parameters<typeof fetchUser>[0]
   } = {}
 ) => {
+  const { data, isLoading: isConfigLoading } = useConfig()
+
+  const options = useMemo(() => {
+    if (isConfigLoading) return
+    if (data?.is_silent_login_enabled !== true) {
+      return {
+        ...opts,
+        attemptSilent: false,
+      }
+    }
+    return opts.fetchUserOptions
+  }, [data, opts, isConfigLoading])
+
   const query = useQuery({
     // eslint-disable-next-line @tanstack/query/exhaustive-deps
     queryKey: [keys.user],
-    queryFn: () => fetchUser(opts.fetchUserOptions),
+    queryFn: () => fetchUser(options),
     staleTime: Infinity,
+    enabled: !isConfigLoading,
   })
 
   useEffect(() => {
@@ -51,6 +66,7 @@ export const useUser = (
     refetch: query.refetch,
     user: isLoggedOut ? undefined : (query.data as ApiUser | undefined),
     isLoggedIn,
+    isLoading: query.isLoading,
     logout,
   }
 }

src/frontend/src/features/auth/index.ts

@@ -1,3 +1,4 @@
 export { useUser } from './api/useUser'
+export { useSyncUserPreferencesWithBackend } from './api/useSyncUserPreferencesWithBackend'
 export { authUrl } from './utils/authUrl'
 export { UserAware } from './components/UserAware'

src/frontend/src/features/notifications/MainNotificationToast.tsx

@@ -11,7 +11,7 @@ import { useNotificationSound } from '@/features/notifications/hooks/useSoundNot
 import { ToastProvider, toastQueue } from './components/ToastProvider'
 import { WaitingParticipantNotification } from './components/WaitingParticipantNotification'
 import {
-  EMOJIS,
+  Emoji,
   Reaction,
 } from '@/features/rooms/livekit/components/controls/ReactionsToggle'
 import {
@@ -50,7 +50,7 @@ export const MainNotificationToast = () => {
   }, [room, triggerNotificationSound])
 
   const handleEmoji = (emoji: string, participant: Participant) => {
-    if (!emoji || !EMOJIS.includes(emoji)) return
+    if (!emoji || !Object.values(Emoji).includes(emoji as Emoji)) return
     const id = instanceIdRef.current++
     setReactions((prev) => [
       ...prev,

src/frontend/src/features/notifications/components/WaitingParticipantNotification.tsx

@@ -10,10 +10,14 @@ import { usePrevious } from '@/hooks/usePrevious'
 import { WaitingParticipant } from '@/features/rooms/api/listWaitingParticipants'
 import { useWaitingParticipants } from '@/features/rooms/hooks/useWaitingParticipants'
 import { useSidePanel } from '@/features/rooms/livekit/hooks/useSidePanel'
+import { useNotificationSound } from '../hooks/useSoundNotification'
+import { NotificationType } from '@/features/notifications'
 
 export const NOTIFICATION_DISPLAY_DURATION = 10000
 
 export const WaitingParticipantNotification = () => {
+  const { triggerNotificationSound } = useNotificationSound()
+
   const { t } = useTranslation('notifications', {
     keyPrefix: 'waitingParticipants',
   })
@@ -37,6 +41,9 @@ export const WaitingParticipantNotification = () => {
       !isParticipantsOpen
     ) {
       setShowQuickActionsMessage(true)
+
+      triggerNotificationSound(NotificationType.ParticipantJoined)
+
       if (timerRef.current !== null) {
         clearTimeout(timerRef.current)
       }
@@ -48,7 +55,12 @@ export const WaitingParticipantNotification = () => {
       // Hide notification when the participant count changes
       setShowQuickActionsMessage(false)
     }
-  }, [waitingParticipants, prevWaitingParticipant, isParticipantsOpen])
+  }, [
+    waitingParticipants,
+    prevWaitingParticipant,
+    isParticipantsOpen,
+    triggerNotificationSound,
+  ])
 
   useEffect(() => {
     // This cleanup function will only run when the component unmounts

src/frontend/src/features/recording/api/fetchRecording.ts

@@ -0,0 +1,18 @@
+import { fetchApi } from '@/api/fetchApi'
+import { ApiRoom } from '@/features/rooms/api/ApiRoom'
+import { RecordingMode, RecordingStatus } from '@/features/recording'
+
+export type RecordingApi = {
+  id: string
+  room: Pick<ApiRoom, 'id' | 'name' | 'slug' | 'access_level'>
+  created_at: string
+  key: string
+  mode: RecordingMode
+  status: RecordingStatus
+  is_expired: boolean
+  expired_at: string
+}
+
+export const fetchRecording = ({ recordingId }: { recordingId?: string }) => {
+  return fetchApi<RecordingApi>(`/recordings/${recordingId}/`)
+}

src/frontend/src/features/recording/api/startRecording.ts

@@ -27,5 +27,6 @@ export function useStartRecording(
   return useMutation<ApiRoom, ApiError, StartRecordingParams>({
     mutationFn: startRecording,
     onSuccess: options?.onSuccess,
+    onError: options?.onError,
   })
 }

src/frontend/src/features/recording/api/stopRecording.ts

@@ -19,5 +19,6 @@ export function useStopRecording(
   return useMutation<ApiRoom, ApiError, StopRecordingParams>({
     mutationFn: stopRecording,
     onSuccess: options?.onSuccess,
+    onError: options?.onError,
   })
 }

src/frontend/src/features/recording/components/RecordingStateToast.tsx

@@ -9,15 +9,42 @@ import { RemoteParticipant, RoomEvent } from 'livekit-client'
 import { decodeNotificationDataReceived } from '@/features/notifications/utils'
 import { NotificationType } from '@/features/notifications/NotificationType'
 import { RecordingStatus, recordingStore } from '@/stores/recording'
+import { RiRecordCircleLine } from '@remixicon/react'
+import {
+  RecordingMode,
+  useHasRecordingAccess,
+  useIsRecordingActive,
+} from '@/features/recording'
+import { FeatureFlags } from '@/features/analytics/enums'
+import { Button as RACButton } from 'react-aria-components'
+import { useSidePanel } from '@/features/rooms/livekit/hooks/useSidePanel'
 
 export const RecordingStateToast = () => {
   const { t } = useTranslation('rooms', {
-    keyPrefix: 'recordingBadge',
+    keyPrefix: 'recordingStateToast',
   })
   const room = useRoomContext()
 
+  const { openTranscript, openScreenRecording } = useSidePanel()
+
   const recordingSnap = useSnapshot(recordingStore)
 
+  const hasTranscriptAccess = useHasRecordingAccess(
+    RecordingMode.Transcript,
+    FeatureFlags.Transcript
+  )
+
+  const isTranscriptActive = useIsRecordingActive(RecordingMode.Transcript)
+
+  const hasScreenRecordingAccess = useHasRecordingAccess(
+    RecordingMode.ScreenRecording,
+    FeatureFlags.ScreenRecording
+  )
+
+  const isScreenRecordingActive = useIsRecordingActive(
+    RecordingMode.ScreenRecording
+  )
+
   useEffect(() => {
     if (room.isRecording && recordingSnap.status == RecordingStatus.STOPPED) {
       recordingStore.status = RecordingStatus.ANY_STARTED
@@ -98,6 +125,12 @@ export const RecordingStateToast = () => {
 
   if (!key) return
 
+  const isStarted = key?.includes('started')
+
+  const hasScreenRecordingAccessAndActive =
+    isScreenRecordingActive && hasScreenRecordingAccess
+  const hasTranscriptAccessAndActive = isTranscriptActive && hasTranscriptAccess
+
   return (
     <div
       className={css({
@@ -107,7 +140,7 @@ export const RecordingStateToast = () => {
         left: '10px',
         paddingY: '0.25rem',
         paddingX: '0.75rem 0.75rem',
-        backgroundColor: 'primaryDark.100',
+        backgroundColor: 'danger.700',
         borderColor: 'white',
         border: '1px solid',
         color: 'white',
@@ -115,15 +148,51 @@ export const RecordingStateToast = () => {
         gap: '0.5rem',
       })}
     >
-      <Spinner size={20} variant="dark" />
-      <Text
-        variant={'sm'}
-        className={css({
-          fontWeight: '500 !important',
-        })}
-      >
-        {t(key)}
-      </Text>
+      {isStarted ? (
+        <RiRecordCircleLine
+          size={20}
+          className={css({
+            animation: 'pulse_background 1s infinite',
+          })}
+        />
+      ) : (
+        <Spinner size={20} variant="dark" />
+      )}
+
+      {!hasScreenRecordingAccessAndActive && !hasTranscriptAccessAndActive && (
+        <Text
+          variant={'sm'}
+          className={css({
+            fontWeight: '500 !important',
+          })}
+        >
+          {t(key)}
+        </Text>
+      )}
+      {hasScreenRecordingAccessAndActive && (
+        <RACButton
+          onPress={openScreenRecording}
+          className={css({
+            textStyle: 'sm !important',
+            fontWeight: '500 !important',
+            cursor: 'pointer',
+          })}
+        >
+          {t(key)}
+        </RACButton>
+      )}
+      {hasTranscriptAccessAndActive && (
+        <RACButton
+          onPress={openTranscript}
+          className={css({
+            textStyle: 'sm !important',
+            fontWeight: '500 !important',
+            cursor: 'pointer',
+          })}
+        >
+          {t(key)}
+        </RACButton>
+      )}
     </div>
   )
 }

src/frontend/src/features/recording/components/ScreenRecordingSidePanel.tsx

@@ -1,4 +1,4 @@
-import { A, Button, Div, H, Text } from '@/primitives'
+import { A, Button, Dialog, Div, H, P, Text } from '@/primitives'
 
 import fourthSlide from '@/assets/intro-slider/4_record.png'
 import { css } from '@/styled-system/css'
@@ -6,39 +6,50 @@ import { useRoomId } from '@/features/rooms/livekit/hooks/useRoomId'
 import { useRoomContext } from '@livekit/components-react'
 import {
   RecordingMode,
+  useIsRecordingTransitioning,
   useStartRecording,
   useStopRecording,
 } from '@/features/recording'
 import { useEffect, useMemo, useState } from 'react'
-import { RoomEvent } from 'livekit-client'
+import { ConnectionState, RoomEvent } from 'livekit-client'
 import { useTranslation } from 'react-i18next'
 import { RecordingStatus, recordingStore } from '@/stores/recording'
 import { CRISP_HELP_ARTICLE_RECORDING } from '@/utils/constants'
-import { useIsRecordingTransitioning } from '@/features/recording'
 
 import {
-  useNotifyParticipants,
   NotificationType,
+  useNotifyParticipants,
 } from '@/features/notifications'
 import posthog from 'posthog-js'
 import { useSnapshot } from 'valtio/index'
+import { Spinner } from '@/primitives/Spinner'
 
 export const ScreenRecordingSidePanel = () => {
   const [isLoading, setIsLoading] = useState(false)
   const recordingSnap = useSnapshot(recordingStore)
   const { t } = useTranslation('rooms', { keyPrefix: 'screenRecording' })
 
+  const [isErrorDialogOpen, setIsErrorDialogOpen] = useState('')
+
   const { notifyParticipants } = useNotifyParticipants()
 
   const roomId = useRoomId()
 
-  const { mutateAsync: startRecordingRoom } = useStartRecording()
-  const { mutateAsync: stopRecordingRoom } = useStopRecording()
+  const { mutateAsync: startRecordingRoom, isPending: isPendingToStart } =
+    useStartRecording({
+      onError: () => setIsErrorDialogOpen('start'),
+    })
+  const { mutateAsync: stopRecordingRoom, isPending: isPendingToStop } =
+    useStopRecording({
+      onError: () => setIsErrorDialogOpen('stop'),
+    })
 
   const statuses = useMemo(() => {
     return {
       isAnotherModeStarted:
         recordingSnap.status == RecordingStatus.TRANSCRIPT_STARTED,
+      isStarting:
+        recordingSnap.status == RecordingStatus.SCREEN_RECORDING_STARTING,
       isStarted:
         recordingSnap.status == RecordingStatus.SCREEN_RECORDING_STARTED,
       isStopping:
@@ -47,6 +58,7 @@ export const ScreenRecordingSidePanel = () => {
   }, [recordingSnap])
 
   const room = useRoomContext()
+  const isRoomConnected = room.state == ConnectionState.Connected
   const isRecordingTransitioning = useIsRecordingTransitioning()
 
   useEffect(() => {
@@ -91,8 +103,11 @@ export const ScreenRecordingSidePanel = () => {
 
   const isDisabled = useMemo(
     () =>
-      isLoading || isRecordingTransitioning || statuses.isAnotherModeStarted,
-    [isLoading, isRecordingTransitioning, statuses]
+      isLoading ||
+      isRecordingTransitioning ||
+      statuses.isAnotherModeStarted ||
+      !isRoomConnected,
+    [isLoading, isRecordingTransitioning, statuses, isRoomConnected]
   )
 
   return (
@@ -142,7 +157,7 @@ export const ScreenRecordingSidePanel = () => {
         </>
       ) : (
         <>
-          {statuses.isStopping ? (
+          {statuses.isStopping || isPendingToStop ? (
             <>
               <H lvl={3} margin={false}>
                 {t('stopping.heading')}
@@ -160,6 +175,7 @@ export const ScreenRecordingSidePanel = () => {
               >
                 {t('stopping.body')}
               </Text>
+              <Spinner />
             </>
           ) : (
             <>
@@ -189,12 +205,33 @@ export const ScreenRecordingSidePanel = () => {
                 size="sm"
                 variant="tertiary"
               >
-                {t('start.button')}
+                {statuses.isStarting || isPendingToStart ? (
+                  <>
+                    <Spinner size={20} />
+                    {t('start.loading')}
+                  </>
+                ) : (
+                  t('start.button')
+                )}
               </Button>
             </>
           )}
         </>
       )}
+      <Dialog
+        isOpen={!!isErrorDialogOpen}
+        role="alertdialog"
+        aria-label={t('alert.title')}
+      >
+        <P>{t(`alert.body.${isErrorDialogOpen}`)}</P>
+        <Button
+          variant="text"
+          size="sm"
+          onPress={() => setIsErrorDialogOpen('')}
+        >
+          {t('alert.button')}
+        </Button>
+      </Dialog>
     </Div>
   )
 }

src/frontend/src/features/recording/components/TranscriptSidePanel.tsx

@@ -1,4 +1,4 @@
-import { A, Button, Div, H, LinkButton, Text } from '@/primitives'
+import { A, Button, Dialog, Div, H, LinkButton, P, Text } from '@/primitives'
 
 import thirdSlide from '@/assets/intro-slider/3_resume.png'
 import { css } from '@/styled-system/css'
@@ -12,7 +12,7 @@ import {
   useStopRecording,
 } from '../index'
 import { useEffect, useMemo, useState } from 'react'
-import { RoomEvent } from 'livekit-client'
+import { ConnectionState, RoomEvent } from 'livekit-client'
 import { useTranslation } from 'react-i18next'
 import { RecordingStatus, recordingStore } from '@/stores/recording'
 import {
@@ -26,11 +26,14 @@ import {
 } from '@/features/notifications'
 import posthog from 'posthog-js'
 import { useSnapshot } from 'valtio/index'
+import { Spinner } from '@/primitives/Spinner'
 
 export const TranscriptSidePanel = () => {
   const [isLoading, setIsLoading] = useState(false)
   const { t } = useTranslation('rooms', { keyPrefix: 'transcript' })
 
+  const [isErrorDialogOpen, setIsErrorDialogOpen] = useState('')
+
   const recordingSnap = useSnapshot(recordingStore)
 
   const { notifyParticipants } = useNotifyParticipants()
@@ -41,13 +44,21 @@ export const TranscriptSidePanel = () => {
   )
   const roomId = useRoomId()
 
-  const { mutateAsync: startRecordingRoom } = useStartRecording()
-  const { mutateAsync: stopRecordingRoom } = useStopRecording()
+  const { mutateAsync: startRecordingRoom, isPending: isPendingToStart } =
+    useStartRecording({
+      onError: () => setIsErrorDialogOpen('start'),
+    })
+
+  const { mutateAsync: stopRecordingRoom, isPending: isPendingToStop } =
+    useStopRecording({
+      onError: () => setIsErrorDialogOpen('stop'),
+    })
 
   const statuses = useMemo(() => {
     return {
       isAnotherModeStarted:
         recordingSnap.status == RecordingStatus.SCREEN_RECORDING_STARTED,
+      isStarting: recordingSnap.status == RecordingStatus.TRANSCRIPT_STARTING,
       isStarted: recordingSnap.status == RecordingStatus.TRANSCRIPT_STARTED,
       isStopping: recordingSnap.status == RecordingStatus.TRANSCRIPT_STOPPING,
     }
@@ -56,6 +67,7 @@ export const TranscriptSidePanel = () => {
   const isRecordingTransitioning = useIsRecordingTransitioning()
 
   const room = useRoomContext()
+  const isRoomConnected = room.state == ConnectionState.Connected
 
   useEffect(() => {
     const handleRecordingStatusChanged = () => {
@@ -96,8 +108,11 @@ export const TranscriptSidePanel = () => {
 
   const isDisabled = useMemo(
     () =>
-      isLoading || isRecordingTransitioning || statuses.isAnotherModeStarted,
-    [isLoading, isRecordingTransitioning, statuses]
+      isLoading ||
+      isRecordingTransitioning ||
+      statuses.isAnotherModeStarted ||
+      !isRoomConnected,
+    [isLoading, isRecordingTransitioning, statuses, isRoomConnected]
   )
 
   return (
@@ -175,7 +190,7 @@ export const TranscriptSidePanel = () => {
             </>
           ) : (
             <>
-              {statuses.isStopping ? (
+              {statuses.isStopping || isPendingToStop ? (
                 <>
                   <H lvl={3} margin={false}>
                     {t('stopping.heading')}
@@ -193,6 +208,7 @@ export const TranscriptSidePanel = () => {
                   >
                     {t('stopping.body')}
                   </Text>
+                  <Spinner />
                 </>
               ) : (
                 <>
@@ -222,7 +238,14 @@ export const TranscriptSidePanel = () => {
                     size="sm"
                     variant="tertiary"
                   >
-                    {t('start.button')}
+                    {statuses.isStarting || isPendingToStart ? (
+                      <>
+                        <Spinner size={20} />
+                        {t('start.loading')}
+                      </>
+                    ) : (
+                      t('start.button')
+                    )}
                   </Button>
                 </>
               )}
@@ -230,6 +253,20 @@ export const TranscriptSidePanel = () => {
           )}
         </>
       )}
+      <Dialog
+        isOpen={!!isErrorDialogOpen}
+        role="alertdialog"
+        aria-label={t('alert.title')}
+      >
+        <P>{t(`alert.body.${isErrorDialogOpen}`)}</P>
+        <Button
+          variant="text"
+          size="sm"
+          onPress={() => setIsErrorDialogOpen('')}
+        >
+          {t('alert.button')}
+        </Button>
+      </Dialog>
     </Div>
   )
 }

src/frontend/src/features/recording/hooks/useIsRecordingActive.ts

@@ -0,0 +1,22 @@
+import { useSnapshot } from 'valtio'
+import { RecordingStatus, recordingStore } from '@/stores/recording'
+import { RecordingMode } from '@/features/recording'
+
+export const useIsRecordingActive = (mode: RecordingMode) => {
+  const recordingSnap = useSnapshot(recordingStore)
+
+  switch (mode) {
+    case RecordingMode.Transcript:
+      return [
+        RecordingStatus.TRANSCRIPT_STARTED,
+        RecordingStatus.TRANSCRIPT_STARTING,
+        RecordingStatus.TRANSCRIPT_STOPPING,
+      ].includes(recordingSnap.status)
+    case RecordingMode.ScreenRecording:
+      return [
+        RecordingStatus.SCREEN_RECORDING_STARTED,
+        RecordingStatus.SCREEN_RECORDING_STARTING,
+        RecordingStatus.SCREEN_RECORDING_STOPPING,
+      ].includes(recordingSnap.status)
+  }
+}

src/frontend/src/features/recording/index.ts

@@ -2,13 +2,17 @@
 export { useIsRecordingModeEnabled } from './hooks/useIsRecordingModeEnabled'
 export { useIsRecordingTransitioning } from './hooks/useIsRecordingTransitioning'
 export { useHasRecordingAccess } from './hooks/useHasRecordingAccess'
+export { useIsRecordingActive } from './hooks/useIsRecordingActive'
 
 // api
 export { useStartRecording } from './api/startRecording'
 export { useStopRecording } from './api/stopRecording'
-export { RecordingMode } from './types'
+export { RecordingMode, RecordingStatus } from './types'
 
 // components
 export { RecordingStateToast } from './components/RecordingStateToast'
 export { TranscriptSidePanel } from './components/TranscriptSidePanel'
 export { ScreenRecordingSidePanel } from './components/ScreenRecordingSidePanel'
+
+// routes
+export { RecordingDownload as RecordingDownloadRoute } from './routes/RecordingDownload'

src/frontend/src/features/recording/routes/RecordingDownload.tsx

@@ -0,0 +1,112 @@
+import { useParams } from 'wouter'
+import { useQuery } from '@tanstack/react-query'
+import { Center, VStack } from '@/styled-system/jsx'
+import { css } from '@/styled-system/css'
+import { useTranslation } from 'react-i18next'
+import fourthSlide from '@/assets/intro-slider/4_record.png'
+import { mediaUrl } from '@/api/mediaUrl'
+import { UserAware, useUser } from '@/features/auth'
+import { Screen } from '@/layout/Screen'
+import { H, LinkButton, Text } from '@/primitives'
+import { formatDate } from '@/utils/formatDate'
+import { ErrorScreen } from '@/components/ErrorScreen'
+import { LoadingScreen } from '@/components/LoadingScreen'
+import { fetchRecording } from '../api/fetchRecording'
+import { RecordingStatus } from '@/features/recording'
+import { useConfig } from '@/api/useConfig'
+
+export const RecordingDownload = () => {
+  const { t } = useTranslation('recording')
+  const { data: configData } = useConfig()
+  const { recordingId } = useParams()
+  const { isLoggedIn, isLoading: isAuthLoading } = useUser()
+
+  const { data, isLoading, isError } = useQuery({
+    queryKey: ['recording', recordingId],
+    queryFn: () => fetchRecording({ recordingId }),
+    retry: false,
+    enabled: !!recordingId,
+  })
+
+  if (isLoading || !data || isAuthLoading) {
+    return <LoadingScreen />
+  }
+
+  if (!isLoggedIn) {
+    return (
+      <ErrorScreen
+        title={t('authentication.title')}
+        body={t('authentication.body')}
+      />
+    )
+  }
+
+  if (isError) {
+    return <ErrorScreen title={t('error.title')} body={t('error.body')} />
+  }
+
+  if (
+    data.status !== RecordingStatus.Saved &&
+    data.status !== RecordingStatus.NotificationSucceed
+  ) {
+    return <ErrorScreen title={t('unsaved.title')} body={t('unsaved.body')} />
+  }
+
+  if (data.is_expired) {
+    return (
+      <ErrorScreen
+        title={t('expired.title')}
+        body={t('expired.body', {
+          date: formatDate(data?.expired_at, 'YYYY-MM-DD HH:mm'),
+        })}
+      />
+    )
+  }
+
+  return (
+    <UserAware>
+      <Screen layout="centered" footer={false}>
+        <Center>
+          <VStack>
+            <img
+              src={fourthSlide}
+              alt={''}
+              className={css({
+                maxHeight: '309px',
+              })}
+            />
+            <H lvl={1} centered>
+              {t('success.title')}
+            </H>
+            <Text centered margin="md" wrap={'balance'}>
+              <span
+                dangerouslySetInnerHTML={{
+                  __html: t('success.body', {
+                    room: data.room.name,
+                    created_at: formatDate(data.created_at, 'YYYY-MM-DD HH:mm'),
+                  }),
+                }}
+              />
+              <span>
+                {configData?.recording?.expiration_days && (
+                  <>
+                    {' '}
+                    {t('success.expiration', {
+                      expiration_days: configData?.recording?.expiration_days,
+                    })}
+                  </>
+                )}
+              </span>
+            </Text>
+            <LinkButton
+              href={mediaUrl(data.key)}
+              download={`${data.room.name}-${formatDate(data.created_at)}`}
+            >
+              {t('success.button')}
+            </LinkButton>
+          </VStack>
+        </Center>
+      </Screen>
+    </UserAware>
+  )
+}

src/frontend/src/features/recording/types.ts

@@ -2,3 +2,14 @@ export enum RecordingMode {
   Transcript = 'transcript',
   ScreenRecording = 'screen_recording',
 }
+
+export enum RecordingStatus {
+  Initiated = 'initiated',
+  Active = 'active',
+  Stopped = 'stopped',
+  Saved = 'saved',
+  Aborted = 'aborted',
+  FailedToStart = 'failedToStart',
+  FailedToStop = 'failedToStop',
+  NotificationSucceed = 'notification_succeeded',
+}

src/frontend/src/features/rooms/components/Join.tsx

@@ -353,7 +353,6 @@ export const Join = ({
                 type="text"
                 onChange={setUsername}
                 label={t('usernameLabel')}
-                aria-label={t('usernameLabel')}
                 defaultValue={initialUserChoices?.username}
                 validate={(value) => !value && t('errors.usernameEmpty')}
                 wrapperProps={{

src/frontend/src/features/rooms/components/Rating.tsx

@@ -6,6 +6,7 @@ import { styled, VStack } from '@/styled-system/jsx'
 import { usePostHog } from 'posthog-js/react'
 import { PostHog } from 'posthog-js'
 import { Button as RACButton } from 'react-aria-components'
+import { useIsAnalyticsEnabled } from '@/features/analytics/hooks/useIsAnalyticsEnabled'
 
 const Card = styled('div', {
   base: {
@@ -299,6 +300,7 @@ const AuthenticationMessage = ({
 }
 
 export const Rating = () => {
+  const isAnalyticsEnabled = useIsAnalyticsEnabled()
   const posthog = usePostHog()
 
   const isUserAnonymous = useMemo(() => {
@@ -307,6 +309,8 @@ export const Rating = () => {
 
   const [step, setStep] = useState(0)
 
+  if (!isAnalyticsEnabled) return
+
   if (step == 0) {
     return <RateQuality posthog={posthog} onNext={() => setStep(step + 1)} />
   }

src/frontend/src/features/rooms/index.ts

@@ -1,5 +1,9 @@
 export { Room as RoomRoute } from './routes/Room'
 export { FeedbackRoute } from './routes/Feedback'
-export { roomIdPattern, isRoomValid } from './utils/isRoomValid'
+export {
+  roomIdPattern,
+  isRoomValid,
+  flexibleRoomIdPattern,
+} from './utils/isRoomValid'
 export { generateRoomId } from './utils/generateRoomId'
 export { useCreateRoom } from './api/createRoom'

src/frontend/src/features/rooms/livekit/components/Info.tsx

@@ -0,0 +1,75 @@
+import { useTranslation } from 'react-i18next'
+import { useEffect, useState } from 'react'
+import { VStack } from '@/styled-system/jsx'
+import { css } from '@/styled-system/css'
+import { RiCheckLine, RiFileCopyLine } from '@remixicon/react'
+import { Button, Div, Text } from '@/primitives'
+import { getRouteUrl } from '@/navigation/getRouteUrl'
+import { useRoomData } from '../hooks/useRoomData'
+
+export const Info = () => {
+  const { t } = useTranslation('rooms', { keyPrefix: 'info' })
+
+  const [isCopied, setIsCopied] = useState(false)
+
+  useEffect(() => {
+    if (isCopied) {
+      const timeout = setTimeout(() => setIsCopied(false), 3000)
+      return () => clearTimeout(timeout)
+    }
+  }, [isCopied])
+
+  const data = useRoomData()
+  const roomUrl = getRouteUrl('room', data?.slug)
+
+  return (
+    <Div
+      display="flex"
+      overflowY="scroll"
+      padding="0 1.5rem"
+      flexGrow={1}
+      flexDirection="column"
+      alignItems="start"
+    >
+      <VStack alignItems="start">
+        <Text
+          as="h3"
+          className={css({
+            display: 'flex',
+            alignItems: 'center',
+          })}
+        >
+          {t('roomInformation.title')}
+        </Text>
+        <Text as="p" variant="xsNote" wrap="pretty">
+          {roomUrl}
+        </Text>
+        <Button
+          size="sm"
+          variant={isCopied ? 'success' : 'tertiaryText'}
+          aria-label={t('roomInformation.button.ariaLabel')}
+          onPress={() => {
+            navigator.clipboard.writeText(roomUrl)
+            setIsCopied(true)
+          }}
+          data-attr="copy-info-sidepannel"
+          style={{
+            marginLeft: '-8px',
+          }}
+        >
+          {isCopied ? (
+            <>
+              <RiCheckLine size={24} style={{ marginRight: '6px' }} />
+              {t('roomInformation.button.copied')}
+            </>
+          ) : (
+            <>
+              <RiFileCopyLine size={24} style={{ marginRight: '6px' }} />
+              {t('roomInformation.button.copy')}
+            </>
+          )}
+        </Button>
+      </VStack>
+    </Div>
+  )
+}

src/frontend/src/features/rooms/livekit/components/ParticipantName.tsx

@@ -0,0 +1,42 @@
+import { Text } from '@/primitives'
+import { useTranslation } from 'react-i18next'
+import { useParticipantInfo } from '@livekit/components-react'
+import { Participant } from 'livekit-client'
+
+export const ParticipantName = ({
+  participant,
+  isScreenShare = false,
+}: {
+  participant: Participant
+  isScreenShare: boolean
+}) => {
+  const { t } = useTranslation('rooms', { keyPrefix: 'participantTile' })
+
+  const { identity, name } = useParticipantInfo({ participant })
+  const displayedName = name != '' ? name : identity
+
+  if (isScreenShare) {
+    return (
+      <Text
+        variant="sm"
+        style={{
+          paddingBottom: '0.1rem',
+          marginLeft: '0.4rem',
+        }}
+      >
+        {t('screenShare', { name: displayedName })}
+      </Text>
+    )
+  }
+
+  return (
+    <Text
+      variant="sm"
+      style={{
+        paddingBottom: '0.1rem',
+      }}
+    >
+      {displayedName}
+    </Text>
+  )
+}

src/frontend/src/features/rooms/livekit/components/ParticipantTile.tsx

@@ -2,7 +2,6 @@ import {
   AudioTrack,
   ConnectionQualityIndicator,
   LockLockedIcon,
-  ParticipantName,
   ParticipantTileProps,
   ScreenShareIcon,
   useEnsureTrackRef,
@@ -29,6 +28,7 @@ import { MutedMicIndicator } from './MutedMicIndicator'
 import { ParticipantPlaceholder } from './ParticipantPlaceholder'
 import { ParticipantTileFocus } from './ParticipantTileFocus'
 import { FullScreenShareWarning } from './FullScreenShareWarning'
+import { ParticipantName } from './ParticipantName'
 
 export function TrackRefContextIfNeeded(
   props: React.PropsWithChildren<{
@@ -97,6 +97,8 @@ export const ParticipantTile: (
     participant: trackReference.participant,
   })
 
+  const isScreenShare = trackReference.source != Track.Source.Camera
+
   return (
     <div ref={ref} style={{ position: 'relative' }} {...elementProps}>
       <TrackRefContextIfNeeded trackRef={trackReference}>
@@ -129,45 +131,50 @@ export const ParticipantTile: (
               {!disableMetadata && (
                 <div className="lk-participant-metadata">
                   <HStack gap={0.25}>
-                    <MutedMicIndicator
-                      participant={trackReference.participant}
-                    />
+                    {!isScreenShare && (
+                      <MutedMicIndicator
+                        participant={trackReference.participant}
+                      />
+                    )}
                     <div
                       className="lk-participant-metadata-item"
                       style={{
-                        minHeight: '24px',
-                        backgroundColor: isHandRaised ? 'white' : undefined,
-                        color: isHandRaised ? 'black' : undefined,
+                        padding: '0.1rem 0.25rem',
+                        backgroundColor:
+                          isHandRaised && !isScreenShare ? 'white' : undefined,
+                        color:
+                          isHandRaised && !isScreenShare ? 'black' : undefined,
                         transition: 'background 200ms ease, color 400ms ease',
                       }}
                     >
-                      {trackReference.source === Track.Source.Camera ? (
-                        <>
-                          {isHandRaised && (
-                            <RiHand
-                              color="black"
-                              size={16}
-                              style={{
-                                marginInlineEnd: '.25rem', // fixme - match TrackMutedIndicator styling
-                                animationDuration: '300ms',
-                                animationName: 'wave_hand',
-                                animationIterationCount: '2',
-                              }}
-                            />
-                          )}
-                          {isEncrypted && (
-                            <LockLockedIcon
-                              style={{ marginRight: '0.25rem' }}
-                            />
-                          )}
-                          <ParticipantName />
-                        </>
-                      ) : (
-                        <>
-                          <ScreenShareIcon style={{ marginRight: '0.25rem' }} />
-                          <ParticipantName>&apos;s screen</ParticipantName>
-                        </>
+                      {isHandRaised && !isScreenShare && (
+                        <RiHand
+                          color="black"
+                          size={16}
+                          style={{
+                            marginRight: '0.4rem',
+                            minWidth: '16px',
+                            animationDuration: '300ms',
+                            animationName: 'wave_hand',
+                            animationIterationCount: '2',
+                          }}
+                        />
                       )}
+                      {isScreenShare && (
+                        <ScreenShareIcon
+                          style={{
+                            maxWidth: '20px',
+                            width: '100%',
+                          }}
+                        />
+                      )}
+                      {isEncrypted && !isScreenShare && (
+                        <LockLockedIcon style={{ marginRight: '0.25rem' }} />
+                      )}
+                      <ParticipantName
+                        isScreenShare={isScreenShare}
+                        participant={trackReference.participant}
+                      />
                     </div>
                   </HStack>
                   <ConnectionQualityIndicator className="lk-participant-metadata-item" />

src/frontend/src/features/rooms/livekit/components/ReactionPortal.tsx

@@ -15,6 +15,7 @@ export const INITIAL_POSITION = 200
 interface FloatingReactionProps {
   emoji: string
   name?: string
+  isLocal?: boolean
   speed?: number
   scale?: number
 }
@@ -22,6 +23,7 @@ interface FloatingReactionProps {
 export function FloatingReaction({
   emoji,
   name,
+  isLocal = false,
   speed = 1,
   scale = 1,
 }: FloatingReactionProps) {
@@ -60,7 +62,6 @@ export function FloatingReaction({
   return (
     <div
       className={css({
-        fontSize: '3rem',
         position: 'absolute',
         display: 'flex',
         alignItems: 'center',
@@ -69,23 +70,27 @@ export function FloatingReaction({
       style={{
         left: left,
         bottom: INITIAL_POSITION + deltaY,
-        transform: `scale(${scale})`,
         opacity: opacity,
       }}
     >
-      <span
+      <img
+        src={`/assets/reactions/${emoji}.png`}
+        alt={''}
         className={css({
-          lineHeight: '57px',
+          height: '50px',
         })}
-      >
-        {emoji}
-      </span>
+        style={{
+          transform: `scale(${scale})`,
+          transformOrigin: 'center bottom',
+        }}
+      />
       {name && (
         <Text
           variant="sm"
           className={css({
-            backgroundColor: 'primaryDark.100',
-            color: 'white',
+            backgroundColor: isLocal ? 'primary.100' : 'primaryDark.100',
+            color: isLocal ? 'black' : 'white',
+            fontWeight: 500,
             textAlign: 'center',
             borderRadius: '20px',
             paddingX: '0.5rem',
@@ -128,6 +133,7 @@ export function ReactionPortal({
         speed={speed}
         scale={scale}
         name={participant?.isLocal ? t('you') : participant.name}
+        isLocal={participant?.isLocal}
       />
     </div>,
     document.body

src/frontend/src/features/rooms/livekit/components/SidePanel.tsx

@@ -12,6 +12,7 @@ import { Chat } from '../prefabs/Chat'
 import { Effects } from './effects/Effects'
 import { Admin } from './Admin'
 import { Tools } from './Tools'
+import { Info } from './Info'
 
 type StyledSidePanelProps = {
   title: string
@@ -109,9 +110,10 @@ const StyledSidePanel = ({
 type PanelProps = {
   isOpen: boolean
   children: React.ReactNode
+  keepAlive?: boolean
 }
 
-const Panel = ({ isOpen, children }: PanelProps) => (
+const Panel = ({ isOpen, keepAlive = false, children }: PanelProps) => (
   <div
     style={{
       display: isOpen ? 'inherit' : 'none',
@@ -120,7 +122,7 @@ const Panel = ({ isOpen, children }: PanelProps) => (
       flexGrow: 1,
     }}
   >
-    {children}
+    {keepAlive || isOpen ? children : null}
   </div>
 )
 
@@ -133,6 +135,7 @@ export const SidePanel = () => {
     isSidePanelOpen,
     isToolsOpen,
     isAdminOpen,
+    isInfoOpen,
     isSubPanelOpen,
     activeSubPanelId,
   } = useSidePanel()
@@ -158,7 +161,7 @@ export const SidePanel = () => {
       <Panel isOpen={isEffectsOpen}>
         <Effects />
       </Panel>
-      <Panel isOpen={isChatOpen}>
+      <Panel isOpen={isChatOpen} keepAlive={true}>
         <Chat />
       </Panel>
       <Panel isOpen={isToolsOpen}>
@@ -167,6 +170,9 @@ export const SidePanel = () => {
       <Panel isOpen={isAdminOpen}>
         <Admin />
       </Panel>
+      <Panel isOpen={isInfoOpen}>
+        <Info />
+      </Panel>
     </StyledSidePanel>
   )
 }

src/frontend/src/features/rooms/livekit/components/Tools.tsx

@@ -10,10 +10,9 @@ import {
   useIsRecordingModeEnabled,
   RecordingMode,
   useHasRecordingAccess,
-} from '@/features/recording'
-import {
   TranscriptSidePanel,
   ScreenRecordingSidePanel,
+  useIsRecordingActive,
 } from '@/features/recording'
 import { FeatureFlags } from '@/features/analytics/enums'
 
@@ -22,6 +21,8 @@ export interface ToolsButtonProps {
   title: string
   description: string
   onPress: () => void
+  isBetaFeature?: boolean
+  isActive?: boolean
 }
 
 const ToolButton = ({
@@ -29,6 +30,8 @@ const ToolButton = ({
   title,
   description,
   onPress,
+  isBetaFeature = false,
+  isActive = false,
 }: ToolsButtonProps) => {
   return (
     <RACButton
@@ -59,13 +62,47 @@ const ToolButton = ({
           display: 'flex',
           justifyContent: 'center',
           alignItems: 'center',
+          position: 'relative',
         })}
       >
         {icon}
+        {isBetaFeature && (
+          <div
+            className={css({
+              position: 'absolute',
+              backgroundColor: 'primary.50',
+              color: 'primary.800',
+              fontSize: '12px',
+              fontWeight: 500,
+              borderRadius: '4px',
+              paddingX: '4px',
+              paddingBottom: '1px',
+              bottom: -8,
+              right: -8,
+            })}
+          >
+            BETA
+          </div>
+        )}
       </div>
       <div>
-        <Text margin={false} as="h3">
+        <Text
+          margin={false}
+          as="h3"
+          className={css({ display: 'flex', gap: 0.25 })}
+        >
           {title}
+          {isActive && (
+            <div
+              className={css({
+                backgroundColor: 'primary.500',
+                height: '10px',
+                width: '10px',
+                marginTop: '5px',
+                borderRadius: '100%',
+              })}
+            />
+          )}
         </Text>
         <Text as="p" variant="smNote" wrap="pretty">
           {description}
@@ -79,15 +116,22 @@ export const Tools = () => {
   const { openTranscript, openScreenRecording, activeSubPanelId } =
     useSidePanel()
   const { t } = useTranslation('rooms', { keyPrefix: 'moreTools' })
+
   const isTranscriptEnabled = useIsRecordingModeEnabled(
     RecordingMode.Transcript
   )
 
+  const isTranscriptActive = useIsRecordingActive(RecordingMode.Transcript)
+
   const hasScreenRecordingAccess = useHasRecordingAccess(
     RecordingMode.ScreenRecording,
     FeatureFlags.ScreenRecording
   )
 
+  const isScreenRecordingActive = useIsRecordingActive(
+    RecordingMode.ScreenRecording
+  )
+
   switch (activeSubPanelId) {
     case SubPanelId.TRANSCRIPT:
       return <TranscriptSidePanel />
@@ -127,6 +171,8 @@ export const Tools = () => {
           title={t('tools.transcript.title')}
           description={t('tools.transcript.body')}
           onPress={() => openTranscript()}
+          isBetaFeature
+          isActive={isTranscriptActive}
         />
       )}
       {hasScreenRecordingAccess && (
@@ -135,6 +181,8 @@ export const Tools = () => {
           title={t('tools.screenRecording.title')}
           description={t('tools.screenRecording.body')}
           onPress={() => openScreenRecording()}
+          isBetaFeature
+          isActive={isScreenRecordingActive}
         />
       )}
     </Div>

src/frontend/src/features/rooms/livekit/components/blur/FaceLandmarksProcessor.ts

@@ -1,4 +1,4 @@
-import { ProcessorOptions, Track } from 'livekit-client'
+import { ProcessorOptions, Track, TrackProcessor } from 'livekit-client'
 import posthog from 'posthog-js'
 import {
   FilesetResolver,
@@ -11,19 +11,20 @@ import {
   TIMEOUT_TICK,
   timerWorkerScript,
 } from './TimerWorker'
-import {
-  BackgroundProcessorInterface,
-  BackgroundOptions,
-  ProcessorType,
-} from '.'
+import { ProcessorType } from '.'
 
 const PROCESSING_WIDTH = 256 * 3
 const PROCESSING_HEIGHT = 144 * 3
 
 const FACE_LANDMARKS_CANVAS_ID = 'face-landmarks-local'
 
-export class FaceLandmarksProcessor implements BackgroundProcessorInterface {
-  options: BackgroundOptions
+export type FaceLandmarksOptions = {
+  showGlasses: boolean
+  showFrench: boolean
+}
+
+export class FaceLandmarksProcessor implements TrackProcessor<Track.Kind> {
+  options: FaceLandmarksOptions
   name: string
   processedTrack?: MediaStreamTrack | undefined
 
@@ -50,7 +51,7 @@ export class FaceLandmarksProcessor implements BackgroundProcessorInterface {
   glassesImage?: HTMLImageElement
   mustacheImage?: HTMLImageElement
   beretImage?: HTMLImageElement
-  constructor(opts: BackgroundOptions) {
+  constructor(opts: FaceLandmarksOptions) {
     this.name = 'face_landmarks'
     this.options = opts
     this.type = ProcessorType.FACE_LANDMARKS
@@ -314,7 +315,7 @@ export class FaceLandmarksProcessor implements BackgroundProcessorInterface {
     return element
   }
 
-  update(opts: BackgroundOptions): void {
+  update(opts: FaceLandmarksOptions): void {
     this.options = opts
   }
 

src/frontend/src/features/rooms/livekit/components/blur/index.ts

@@ -3,13 +3,10 @@ import { Track, TrackProcessor } from 'livekit-client'
 import { BackgroundBlurTrackProcessorJsWrapper } from './BackgroundBlurTrackProcessorJsWrapper'
 import { BackgroundCustomProcessor } from './BackgroundCustomProcessor'
 import { BackgroundVirtualTrackProcessorJsWrapper } from './BackgroundVirtualTrackProcessorJsWrapper'
-import { FaceLandmarksProcessor } from './FaceLandmarksProcessor'
 
 export type BackgroundOptions = {
   blurRadius?: number
   imagePath?: string
-  showGlasses?: boolean
-  showFrench?: boolean
 }
 
 export interface ProcessorSerialized {
@@ -32,12 +29,12 @@ export enum ProcessorType {
 }
 
 export class BackgroundProcessorFactory {
+  static hasModernApiSupport() {
+    return ProcessorWrapper.hasModernApiSupport
+  }
+
   static isSupported() {
-    return (
-      ProcessorWrapper.isSupported ||
-      BackgroundCustomProcessor.isSupported ||
-      FaceLandmarksProcessor.isSupported
-    )
+    return ProcessorWrapper.isSupported || BackgroundCustomProcessor.isSupported
   }
 
   static getProcessor(
@@ -58,10 +55,6 @@ export class BackgroundProcessorFactory {
       if (BackgroundCustomProcessor.isSupported) {
         return new BackgroundCustomProcessor(opts)
       }
-    } else if (type === ProcessorType.FACE_LANDMARKS) {
-      if (FaceLandmarksProcessor.isSupported) {
-        return new FaceLandmarksProcessor(opts)
-      }
     }
     return undefined
   }

src/frontend/src/features/rooms/livekit/components/controls/InfoToggle.tsx

@@ -0,0 +1,41 @@
+import { useTranslation } from 'react-i18next'
+import { RiInformationLine } from '@remixicon/react'
+import { css } from '@/styled-system/css'
+import { ToggleButton } from '@/primitives'
+import { useSidePanel } from '../../hooks/useSidePanel'
+import { ToggleButtonProps } from '@/primitives/ToggleButton'
+
+export const InfoToggle = ({
+  onPress,
+  ...props
+}: Partial<ToggleButtonProps>) => {
+  const { t } = useTranslation('rooms', { keyPrefix: 'controls.info' })
+
+  const { isInfoOpen, toggleInfo } = useSidePanel()
+  const tooltipLabel = isInfoOpen ? 'open' : 'closed'
+
+  return (
+    <div
+      className={css({
+        position: 'relative',
+        display: 'inline-block',
+      })}
+    >
+      <ToggleButton
+        square
+        variant="primaryTextDark"
+        aria-label={t(tooltipLabel)}
+        tooltip={t(tooltipLabel)}
+        isSelected={isInfoOpen}
+        onPress={(e) => {
+          toggleInfo()
+          onPress?.(e)
+        }}
+        data-attr={`controls-info-${tooltipLabel}`}
+        {...props}
+      >
+        <RiInformationLine />
+      </ToggleButton>
+    </div>
+  )
+}

src/frontend/src/features/rooms/livekit/components/controls/Options/FeedbackMenuItem.tsx

@@ -2,14 +2,17 @@ import { RiMegaphoneLine } from '@remixicon/react'
 import { MenuItem } from 'react-aria-components'
 import { useTranslation } from 'react-i18next'
 import { menuRecipe } from '@/primitives/menuRecipe'
-import { GRIST_FEEDBACKS_FORM } from '@/utils/constants'
+import { useConfig } from '@/api/useConfig'
 
 export const FeedbackMenuItem = () => {
   const { t } = useTranslation('rooms', { keyPrefix: 'options.items' })
+  const { data } = useConfig()
+
+  if (!data?.feedback?.url) return
 
   return (
     <MenuItem
-      href={GRIST_FEEDBACKS_FORM}
+      href={data?.feedback?.url}
       target="_blank"
       className={menuRecipe({ icon: true, variant: 'dark' }).item}
     >

src/frontend/src/features/rooms/livekit/components/controls/Participants/ParticipantListItem.tsx

@@ -33,19 +33,20 @@ const MicIndicator = ({ participant }: MicIndicatorProps) => {
   const [isAlertOpen, setIsAlertOpen] = useState(false)
   const name = participant.name || participant.identity
 
+  const label = isLocal(participant)
+    ? t('participants.muteYourself')
+    : t('participants.muteParticipant', {
+        name,
+      })
+
   return (
     <>
       <Button
         square
         variant="greyscale"
         size="sm"
-        tooltip={
-          isLocal(participant)
-            ? t('participants.muteYourself')
-            : t('participants.muteParticipant', {
-                name,
-              })
-        }
+        tooltip={label}
+        aria-label={label}
         isDisabled={isMuted}
         onPress={() =>
           !isMuted && isLocal(participant)
@@ -55,7 +56,7 @@ const MicIndicator = ({ participant }: MicIndicatorProps) => {
         data-attr="participants-mute"
       >
         {isMuted ? (
-          <RiMicOffFill color={'gray'} />
+          <RiMicOffFill color={'gray'} aria-hidden={true} />
         ) : (
           <RiMicFill
             className={css({
@@ -64,6 +65,7 @@ const MicIndicator = ({ participant }: MicIndicatorProps) => {
                 ? 'pulse_background 800ms infinite'
                 : undefined,
             })}
+            aria-hidden={true}
           />
         )}
       </Button>

src/frontend/src/features/rooms/livekit/components/controls/ReactionsToggle.tsx

@@ -12,9 +12,19 @@ import {
 } from '@/features/rooms/livekit/components/ReactionPortal'
 import { Toolbar as RACToolbar } from 'react-aria-components'
 import { Participant } from 'livekit-client'
+import useRateLimiter from '@/hooks/useRateLimiter'
 
 // eslint-disable-next-line react-refresh/only-export-components
-export const EMOJIS = ['👍', '👎', '👏', '❤️', '😂', '😮', '🎉']
+export enum Emoji {
+  THUMBS_UP = 'thumbs-up',
+  THUMBS_DOWN = 'thumbs-down',
+  CLAP = 'clapping-hands',
+  HEART = 'red-heart',
+  LAUGHING = 'face-with-tears-of-joy',
+  SURPRISED = 'face-with-open-mouth',
+  CELEBRATION = 'party-popper',
+  PLEASE = 'folded-hands',
+}
 
 export interface Reaction {
   id: number
@@ -56,6 +66,12 @@ export const ReactionsToggle = () => {
     }, ANIMATION_DURATION)
   }
 
+  const debouncedSendReaction = useRateLimiter({
+    callback: sendReaction,
+    maxCalls: 10,
+    windowMs: 1000,
+  })
+
   // Custom animation implementation for the emoji toolbar
   // Could not use a menu and its animation, because a menu would make the toolbar inaccessible by keyboard
   // animation isn't perfect
@@ -105,10 +121,10 @@ export const ReactionsToggle = () => {
           <div
             className={css({
               position: 'absolute',
-              top: -55,
-              left: -114,
+              top: -63,
+              left: -162,
               borderRadius: '8px',
-              padding: '0.25rem',
+              padding: '0.35rem',
               backgroundColor: 'primaryDark.50',
               opacity: opacity,
               transition: 'opacity 0.2s ease',
@@ -122,24 +138,29 @@ export const ReactionsToggle = () => {
             <RACToolbar
               className={css({
                 display: 'flex',
+                gap: '0.5rem',
               })}
             >
-              {EMOJIS.map((emoji, index) => (
+              {Object.values(Emoji).map((emoji, index) => (
                 <Button
                   key={index}
-                  onPress={() => sendReaction(emoji)}
+                  onPress={() => debouncedSendReaction(emoji)}
                   aria-label={t('send', { emoji })}
                   variant="primaryTextDark"
                   size="sm"
+                  square
                   data-attr={`send-reaction-${emoji}`}
                 >
-                  <span
+                  <img
+                    src={`/assets/reactions/${emoji}.png`}
+                    alt=""
                     className={css({
-                      fontSize: '20px',
+                      minHeight: '28px',
+                      minWidth: '28px',
+                      pointerEvents: 'none',
+                      userSelect: 'none',
                     })}
-                  >
-                    {emoji}
-                  </span>
+                  />
                 </Button>
               ))}
             </RACToolbar>

src/frontend/src/features/rooms/livekit/components/effects/EffectsConfiguration.tsx

@@ -15,12 +15,9 @@ import { BlurOnStrong } from '@/components/icons/BlurOnStrong'
 import { useTrackToggle } from '@livekit/components-react'
 import { Loader } from '@/primitives/Loader'
 import { useSyncAfterDelay } from '@/hooks/useSyncAfterDelay'
-import {
-  RiProhibited2Line,
-  RiGlassesLine,
-  RiGoblet2Fill,
-} from '@remixicon/react'
-import { useHasFaceLandmarksAccess } from '../../hooks/useHasFaceLandmarksAccess'
+import { RiProhibited2Line } from '@remixicon/react'
+import { FunnyEffects } from './FunnyEffects'
+import { useHasFunnyEffectsAccess } from '../../hooks/useHasFunnyEffectsAccess'
 
 enum BlurRadius {
   NONE = 0,
@@ -55,7 +52,7 @@ export const EffectsConfiguration = ({
   const { toggle, enabled } = useTrackToggle({ source: Track.Source.Camera })
   const [processorPending, setProcessorPending] = useState(false)
   const processorPendingReveal = useSyncAfterDelay(processorPending)
-  const hasFaceLandmarksAccess = useHasFaceLandmarksAccess()
+  const hasFunnyEffectsAccess = useHasFunnyEffectsAccess()
 
   useEffect(() => {
     const videoElement = videoRef.current
@@ -114,6 +111,13 @@ export const EffectsConfiguration = ({
           type,
           options
         )!
+        // IMPORTANT: Must explicitly stop previous processor before setting a new one
+        // in browsers without modern API support to prevent UI crashes.
+        // This workaround is needed until this issue is resolved:
+        // https://github.com/livekit/track-processors-js/issues/85
+        if (!BackgroundProcessorFactory.hasModernApiSupport()) {
+          await videoTrack.stopProcessor()
+        }
         await videoTrack.setProcessor(newProcessor)
         onSubmit?.(newProcessor)
       } else {
@@ -145,42 +149,9 @@ export const EffectsConfiguration = ({
   }
 
   const tooltipLabel = (type: ProcessorType, options: BackgroundOptions) => {
-    if (type === ProcessorType.FACE_LANDMARKS) {
-      const effect = options.showGlasses ? 'glasses' : 'french'
-      return t(
-        `faceLandmarks.${effect}.${isSelected(type, options) ? 'clear' : 'apply'}`
-      )
-    }
     return t(`${type}.${isSelected(type, options) ? 'clear' : 'apply'}`)
   }
 
-  const getFaceLandmarksOptions = () => {
-    const processor = getProcessor()
-    if (processor?.serialize().type === ProcessorType.FACE_LANDMARKS) {
-      return processor.serialize().options as {
-        showGlasses?: boolean
-        showFrench?: boolean
-      }
-    }
-    return { showGlasses: false, showFrench: false }
-  }
-
-  const toggleFaceLandmarkEffect = async (effect: 'glasses' | 'french') => {
-    const currentOptions = getFaceLandmarksOptions()
-    const newOptions = {
-      ...currentOptions,
-      [effect === 'glasses' ? 'showGlasses' : 'showFrench']:
-        !currentOptions[effect === 'glasses' ? 'showGlasses' : 'showFrench'],
-    }
-
-    if (!newOptions.showGlasses && !newOptions.showFrench) {
-      // If both effects are off stop the processor
-      await clearEffect()
-    } else {
-      await toggleEffect(ProcessorType.FACE_LANDMARKS, newOptions)
-    }
-  }
-
   return (
     <div
       className={css(
@@ -215,7 +186,7 @@ export const EffectsConfiguration = ({
             muted
             style={{
               transform: 'rotateY(180deg)',
-              minHeight: '175px',
+              [layout === 'vertical' ? 'height' : 'minHeight']: '175px',
               borderRadius: '8px',
             }}
           />
@@ -268,6 +239,13 @@ export const EffectsConfiguration = ({
             : {}
         )}
       >
+        {hasFunnyEffectsAccess && (
+          <FunnyEffects
+            videoTrack={videoTrack}
+            isPending={processorPendingReveal}
+            onPending={setProcessorPending}
+          />
+        )}
         {isSupported ? (
           <>
             <div>
@@ -340,8 +318,6 @@ export const EffectsConfiguration = ({
                     <BlurOnStrong />
                   </ToggleButton>
                 </div>
-              </div>
-              {hasFaceLandmarksAccess && (
                 <div
                   className={css({
                     marginTop: '1.5rem',
@@ -354,114 +330,51 @@ export const EffectsConfiguration = ({
                     }}
                     variant="bodyXsBold"
                   >
-                    {t('faceLandmarks.title')}
+                    {t('virtual.title')}
                   </H>
                   <div
                     className={css({
                       display: 'flex',
                       gap: '1.25rem',
+                      flexWrap: 'wrap',
                     })}
                   >
-                    <ToggleButton
-                      variant="bigSquare"
-                      aria-label={tooltipLabel(ProcessorType.FACE_LANDMARKS, {
-                        showGlasses: true,
-                        showFrench: false,
-                      })}
-                      tooltip={tooltipLabel(ProcessorType.FACE_LANDMARKS, {
-                        showGlasses: true,
-                        showFrench: false,
-                      })}
-                      isDisabled={processorPendingReveal}
-                      onChange={async () =>
-                        await toggleFaceLandmarkEffect('glasses')
-                      }
-                      isSelected={getFaceLandmarksOptions().showGlasses}
-                      data-attr="toggle-glasses"
-                    >
-                      <RiGlassesLine />
-                    </ToggleButton>
-                    <ToggleButton
-                      variant="bigSquare"
-                      aria-label={tooltipLabel(ProcessorType.FACE_LANDMARKS, {
-                        showGlasses: false,
-                        showFrench: true,
-                      })}
-                      tooltip={tooltipLabel(ProcessorType.FACE_LANDMARKS, {
-                        showGlasses: false,
-                        showFrench: true,
-                      })}
-                      isDisabled={processorPendingReveal}
-                      onChange={async () =>
-                        await toggleFaceLandmarkEffect('french')
-                      }
-                      isSelected={getFaceLandmarksOptions().showFrench}
-                      data-attr="toggle-french"
-                    >
-                      <RiGoblet2Fill />
-                    </ToggleButton>
-                  </div>
-                </div>
-              )}
-              <div
-                className={css({
-                  marginTop: '1.5rem',
-                })}
-              >
-                <H
-                  lvl={3}
-                  style={{
-                    marginBottom: '1rem',
-                  }}
-                  variant="bodyXsBold"
-                >
-                  {t('virtual.title')}
-                </H>
-                <div
-                  className={css({
-                    display: 'flex',
-                    gap: '1.25rem',
-                    flexWrap: 'wrap',
-                  })}
-                >
-                  {[...Array(8).keys()].map((i) => {
-                    const imagePath = `/assets/backgrounds/${i + 1}.jpg`
-                    const thumbnailPath = `/assets/backgrounds/thumbnails/${i + 1}.jpg`
-                    return (
-                      <ToggleButton
-                        key={i}
-                        variant="bigSquare"
-                        aria-label={tooltipLabel(ProcessorType.VIRTUAL, {
-                          imagePath,
-                        })}
-                        tooltip={tooltipLabel(ProcessorType.VIRTUAL, {
-                          imagePath,
-                        })}
-                        isDisabled={processorPendingReveal}
-                        onChange={async () =>
-                          await toggleEffect(ProcessorType.VIRTUAL, {
+                    {[...Array(8).keys()].map((i) => {
+                      const imagePath = `/assets/backgrounds/${i + 1}.jpg`
+                      const thumbnailPath = `/assets/backgrounds/thumbnails/${i + 1}.jpg`
+                      return (
+                        <ToggleButton
+                          key={i}
+                          variant="bigSquare"
+                          aria-label={tooltipLabel(ProcessorType.VIRTUAL, {
                             imagePath,
-                          })
-                        }
-                        isSelected={isSelected(ProcessorType.VIRTUAL, {
-                          imagePath,
-                        })}
-                        className={css({
-                          bgSize: 'cover',
-                        })}
-                        style={{
-                          backgroundImage: `url(${thumbnailPath})`,
-                        }}
-                        data-attr={`toggle-virtual-${i}`}
-                      />
-                    )
-                  })}
+                          })}
+                          tooltip={tooltipLabel(ProcessorType.VIRTUAL, {
+                            imagePath,
+                          })}
+                          isDisabled={processorPendingReveal}
+                          onChange={async () =>
+                            await toggleEffect(ProcessorType.VIRTUAL, {
+                              imagePath,
+                            })
+                          }
+                          isSelected={isSelected(ProcessorType.VIRTUAL, {
+                            imagePath,
+                          })}
+                          className={css({
+                            bgSize: 'cover',
+                          })}
+                          style={{
+                            backgroundImage: `url(${thumbnailPath})`,
+                          }}
+                          data-attr={`toggle-virtual-${i}`}
+                        />
+                      )
+                    })}
+                  </div>
                 </div>
               </div>
             </div>
-            <Information className={css({ marginTop: '1rem' })}>
-              <Text variant="sm">⚠︎ {t('experimental')}</Text>
-            </Information>
           </>
         ) : (
           <Information>

src/frontend/src/features/rooms/livekit/components/effects/FunnyEffects.tsx

@@ -0,0 +1,120 @@
+import { css } from '@/styled-system/css'
+import { H, ToggleButton } from '@/primitives'
+import { ProcessorType } from '../blur'
+import { RiGlassesLine, RiGoblet2Fill } from '@remixicon/react'
+import { useTranslation } from 'react-i18next'
+import { FaceLandmarksProcessor } from '../blur/FaceLandmarksProcessor'
+import { LocalVideoTrack } from 'livekit-client'
+
+export type FunnyEffectsProps = {
+  videoTrack: LocalVideoTrack
+  isPending?: boolean
+  onPending: (value: boolean) => void
+}
+
+export const FunnyEffects = ({
+  videoTrack,
+  isPending,
+  onPending,
+}: FunnyEffectsProps) => {
+  const { t } = useTranslation('rooms', { keyPrefix: 'effects' })
+
+  const getOptions = () => {
+    const processor = videoTrack?.getProcessor() as FaceLandmarksProcessor
+    if (!processor || processor.type != ProcessorType.FACE_LANDMARKS) {
+      return {
+        showGlasses: false,
+        showFrench: false,
+      }
+    }
+    return processor.serialize().options
+  }
+
+  const options = getOptions()
+
+  const toggleFaceLandmarkEffect = async (
+    showEffect: 'showGlasses' | 'showFrench'
+  ) => {
+    const options = getOptions()
+    const processor = videoTrack?.getProcessor() as FaceLandmarksProcessor
+
+    const newOptions = {
+      ...options,
+      [showEffect]: !options[showEffect],
+    }
+
+    onPending(true)
+
+    try {
+      if (!newOptions.showGlasses && !newOptions.showFrench) {
+        await videoTrack.stopProcessor()
+      } else if (options.showGlasses || options.showFrench) {
+        await processor?.update(newOptions)
+      } else {
+        const newProcessor = new FaceLandmarksProcessor(newOptions)
+        await videoTrack.setProcessor(newProcessor)
+      }
+    } catch (e) {
+      console.error('could not update processor', e)
+    } finally {
+      onPending(false)
+    }
+  }
+
+  const getLabelAction = (enabled: boolean) => (enabled ? 'clear' : 'apply')
+
+  return (
+    <div
+      className={css({
+        marginBottom: '1.5rem',
+      })}
+    >
+      <H
+        lvl={3}
+        style={{
+          marginBottom: '1rem',
+        }}
+        variant="bodyXsBold"
+      >
+        {t('faceLandmarks.title')}
+      </H>
+      <div
+        className={css({
+          display: 'flex',
+          gap: '1.25rem',
+        })}
+      >
+        <ToggleButton
+          variant="bigSquare"
+          aria-label={t(
+            `faceLandmarks.glasses.${getLabelAction(options.showGlasses)}`
+          )}
+          tooltip={t(
+            `faceLandmarks.glasses.${getLabelAction(options.showGlasses)}`
+          )}
+          isDisabled={isPending}
+          onChange={async () => await toggleFaceLandmarkEffect('showGlasses')}
+          isSelected={options.showGlasses}
+          data-attr="toggle-glasses"
+        >
+          <RiGlassesLine />
+        </ToggleButton>
+        <ToggleButton
+          variant="bigSquare"
+          aria-label={t(
+            `faceLandmarks.french.${getLabelAction(options.showFrench)}`
+          )}
+          tooltip={t(
+            `faceLandmarks.french.${getLabelAction(options.showFrench)}`
+          )}
+          isDisabled={isPending}
+          onChange={async () => await toggleFaceLandmarkEffect('showFrench')}
+          isSelected={options.showFrench}
+          data-attr="toggle-french"
+        >
+          <RiGoblet2Fill />
+        </ToggleButton>
+      </div>
+    </div>
+  )
+}