Carry a live chat between an org's websites; member-pinned bootstrap

Shipped

November 12, 2026 at 1:16 AM UTC

Author

Kamo

Commit

71239fe

- POST **************** and /resume proxy MediaService's transfer-token mint/redeem through the usual gate (site key, origin, PUBLIC_CHAT scope) and land on the strict session-creation rate budget (3/min per IP). - GET /bootstrap forwards its query, so ?memberId= (the embed's member-id) reaches MediaService. - OriginMatcher tolerates a trailing slash on an allow-list entry: a browser's Origin never has one, so "https://www.acme.com/" used to refuse the very site it named.