vip only spectator option

server/src/helpers/bandwidthSavings.js

@@ -6,7 +6,7 @@ const { loadConfig } = require('./configLoader');
 
 const MULTI_TAB_MODES = new Set(['allowed', 'verifiedOnly', 'notAllowed']);
 const VIDEO_MODES = new Set(['snapshots', 'live']);
-const EXTERNAL_SPECTATOR_ACCESS_MODES = new Set(['off', 'on', 'admin']);
+const EXTERNAL_SPECTATOR_ACCESS_MODES = new Set(['off', 'on', 'verifiedOnly', 'admin']);
 
 const DEFAULT_BANDWIDTH_SAVINGS = Object.freeze({
   multiTabProtection: 'verifiedOnly',
@@ -83,6 +83,7 @@ function shouldUseSnapshotsForExternalSpectatorVideo() {
 function canUseExternalSpectatorAccess({
   isLocal = false,
   isAdmin = false,
+  isVerified = false,
   hasGrant = false,
 } = {}) {
   /*
@@ -93,6 +94,7 @@ function canUseExternalSpectatorAccess({
   if (isLocal || isAdmin) return true;
   const { externalSpectatorAccess } = getBandwidthSavingsPolicy();
   if (externalSpectatorAccess === 'off') return false;
+  if (externalSpectatorAccess === 'verifiedOnly') return Boolean(isVerified);
   if (externalSpectatorAccess === 'admin') return Boolean(hasGrant);
   return true;
 }

server/src/services/authService/index.js

@@ -65,12 +65,16 @@ function canBecomeSpectator(socket) {
   return canUseExternalSpectatorAccess({
     isLocal: local,
     isAdmin: isAdmin(socket),
+    isVerified: Boolean(socket?.data?.isVerified),
     hasGrant: hasExternalSpectatorGrant(socket),
   });
 }
 
 function externalSpectatorAccessError() {
   const mode = getBandwidthSavingsPolicy().externalSpectatorAccess;
+  if (mode === 'verifiedOnly') {
+    return 'External spectator access requires a verified identity.';
+  }
   if (mode === 'admin') {
     return 'External spectator access requires admin approval for this identity.';
   }

server/src/services/sessionService/index.js

@@ -94,6 +94,7 @@ function buildBandwidthSavingsSessionState(socket) {
     canUseExternalSpectatorAccess: canUseExternalSpectatorAccess({
       isLocal: local,
       isAdmin: isAdmin(socket),
+      isVerified: Boolean(socket?.data?.isVerified),
       hasGrant: granted,
     }),
   };