ajaxter-chat 1.0.1 → 1.0.3

package/README.md

@@ -98,7 +98,7 @@ NEXT_PUBLIC_CHAT_TYPE=BOTH
 |--------------------|---------------------------------------|------------------------------------------|
 | `CHAT_HOST_URL`    | string                                | Base URL of your chat/user API           |
 | `CHAT_HOST_PORT`   | number                                | Port for your API server                 |
-| `CHAT_USER_LIST`   | string                                | Endpoint path to fetch users             |
+| `CHAT_USER_LIST`   | string                                | User list URL — see **User List API** below |
 | `CHAT_STATUS`      | `ACTIVE` \| `DISABLE` \| `MAINTENANCE` | Controls widget visibility & state       |
 | `CHAT_TYPE`        | `SUPPORT` \| `CHAT` \| `BOTH`         | Controls which users are shown           |
 
@@ -126,7 +126,20 @@ NEXT_PUBLIC_CHAT_TYPE=BOTH
 
 ## User List API
 
-The widget fetches users from:
+The widget calls `CHAT_USER_LIST` in three ways:
+
+1. **Same-origin / BFF (recommended)** — value starts with `/`, e.g. `/api/v1/chat/users`. The browser only shows a request to **your** app; your route handler proxies to the real API server-side, so the upstream URL (e.g. `http://your-api.com:4000/...`) does not appear as the client request URL in DevTools.
+2. **Full URL** — value starts with `http://` or `https://`; that exact URL is fetched (visible in Network).
+3. **Legacy** — otherwise it is built as  
+   `CHAT_HOST_URL` + optional `:CHAT_HOST_PORT` + path.
+
+Example (Next.js route at `app/api/v1/chat/users/route.ts` that forwards to your backend):
+
+```env
+NEXT_PUBLIC_CHAT_USER_LIST=/api/v1/chat/users
+```
+
+Legacy example:
 
 ```
 GET ${CHAT_HOST_URL}:${CHAT_HOST_PORT}/${CHAT_USER_LIST}

package/dist/config/index.d.ts

@@ -1,3 +1,16 @@
 import { ChatConfig } from '../types';
 export declare function loadChatConfig(): ChatConfig;
+/**
+ * Resolves the URL used by `fetchUsers`.
+ *
+ * **Same-origin / internal proxy (recommended):** If `CHAT_USER_LIST` starts with `/`
+ * (e.g. `/api/v1/chat/users`), the browser only requests your app origin. The real
+ * backend URL stays on the server (Next.js route, BFF, etc.) and does not appear in
+ * the client Network tab as a cross-origin call.
+ *
+ * **Absolute URL:** If `CHAT_USER_LIST` is a full `http(s)://...` string, it is used as-is
+ * (visible in Network as that host).
+ *
+ * **Legacy:** Otherwise the path is joined with `CHAT_HOST_URL` and optional `CHAT_HOST_PORT`.
+ */
 export declare function buildUserListUrl(config: ChatConfig): string;

package/dist/config/index.js

@@ -83,9 +83,29 @@ export function loadChatConfig() {
         widgetDefaultSize: parseSizeRatio(getEnvVar('CHAT_WIDGET_DEFAULT_SIZE'), 0.45),
     };
 }
+/**
+ * Resolves the URL used by `fetchUsers`.
+ *
+ * **Same-origin / internal proxy (recommended):** If `CHAT_USER_LIST` starts with `/`
+ * (e.g. `/api/v1/chat/users`), the browser only requests your app origin. The real
+ * backend URL stays on the server (Next.js route, BFF, etc.) and does not appear in
+ * the client Network tab as a cross-origin call.
+ *
+ * **Absolute URL:** If `CHAT_USER_LIST` is a full `http(s)://...` string, it is used as-is
+ * (visible in Network as that host).
+ *
+ * **Legacy:** Otherwise the path is joined with `CHAT_HOST_URL` and optional `CHAT_HOST_PORT`.
+ */
 export function buildUserListUrl(config) {
+    const raw = config.userListEndpoint.trim();
+    if (raw.startsWith('/')) {
+        return raw;
+    }
+    if (/^https?:\/\//i.test(raw)) {
+        return raw;
+    }
     const base = config.hostUrl.replace(/\/$/, '');
-    const endpoint = config.userListEndpoint.replace(/^\//, '');
+    const endpoint = raw.replace(/^\//, '');
     if (config.hostPort !== undefined) {
         return `${base}:${config.hostPort}/${endpoint}`;
     }

package/dist/services/userService.js

@@ -1,9 +1,11 @@
 export async function fetchUsers(url) {
+    const sameOriginPath = url.startsWith('/');
     const response = await fetch(url, {
         method: 'GET',
         headers: {
             'Content-Type': 'application/json',
         },
+        credentials: sameOriginPath ? 'same-origin' : 'omit',
     });
     if (!response.ok) {
         throw new Error(`[ChatWidget] Failed to fetch users: ${response.status} ${response.statusText}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ajaxter-chat",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "A reusable, configurable chat widget for React.js and Next.js applications.",
   "main": "dist/index.js",
   "module": "dist/index.esm.js",