fix: make support IM delivery recoverable

internal/support/service.go

@@ -70,6 +70,12 @@ type Session struct {
 	Agent         Agent     `json:"agent"`
 }
 
+const (
+	publicIMAPIPath       = "/v1/im"
+	publicIMWebSocketPath = "/v0/channels"
+	publicIMFilePath      = "/v0/file"
+)
+
 func New(repository Repository, im IM, authConfig config.AuthConfig) *Service {
 	return &Service{repository: repository, im: im, aead: credentialAEAD(authConfig)}
 }
@@ -158,8 +164,8 @@ func (s *Service) OpenSession(ctx context.Context, tenantID, memberID, serviceID
 		return nil, ErrRelationDenied
 	}
 	return &Session{
-		TenantCode: cfg.TenantCode, APIBaseURL: cfg.HTTPAPIURL, WebSocketURL: cfg.WebSocketURL,
-		FileURL: cfg.FileURL, APIKey: cfg.APIKey, Token: imSession.Token, ExpiresAt: imSession.ExpiresAt,
+		TenantCode: cfg.TenantCode, APIBaseURL: publicIMAPIPath, WebSocketURL: publicIMWebSocketPath,
+		FileURL: publicIMFilePath, APIKey: cfg.APIKey, Token: imSession.Token, ExpiresAt: imSession.ExpiresAt,
 		CurrentUserID: imSession.UserID, Topic: conversation.Topic, Relationship: "friend",
 		Agent: Agent{ID: agent.ID, IMUserID: agent.IMUserID, Name: agent.Name, AvatarURL: agent.AvatarURL,
 			OnlineStatus: customerServiceStatus(agent.OnlineStatus)},

internal/support/service_test.go

@@ -91,6 +91,24 @@ func TestOpenSessionAutoAcceptsAndReturnsTopic(t *testing.T) {
 	}
 }
 
+func TestOpenSessionReturnsSameOriginEndpoints(t *testing.T) {
+	repository := &repositoryStub{
+		agent:    &store.CustomerService{ID: 3, Name: "客服01", IMTenantCode: "allrich", IMUserID: "usr_agent", OnlineStatus: 1},
+		identity: &store.MemberIMIdentity{TenantID: 0, MemberID: 9, IMTenantCode: "allrich", IMUserID: "usr_member", IMUsername: "member01"},
+	}
+	im := &imStub{}
+	service := New(repository, im, config.AuthConfig{FinanceMasterKey: strings.Repeat("k", 32)})
+	repository.identity.IMPasswordCipher, _ = service.encryptCredential("password")
+
+	session, err := service.OpenSession(context.Background(), 0, 9, 3, SessionRequest{DeviceID: "web-1", Platform: "web"})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if session.APIBaseURL != "/v1/im" || session.WebSocketURL != "/v0/channels" || session.FileURL != "/v0/file" {
+		t.Fatalf("browser endpoints must be same-origin paths: %+v", session)
+	}
+}
+
 func TestOpenSessionRepairsDriftedIMCredential(t *testing.T) {
 	repository := &repositoryStub{
 		agent:    &store.CustomerService{ID: 3, Name: "客服01", IMTenantCode: "allrich", IMUserID: "usr_agent", OnlineStatus: 1},