Raise client read timeout to 120s for long messages
LibreTranslate runs CPU-only argos models — a paragraph-length chat message takes 20-30s to translate, and longer ones can push past 60s. The 8-second read time...
在 Redis 按会话 GUID 跟踪公共支持聊天
销售游客使用/ws/公-聊天-native 没有会员Id;门票仍然 将占位符成员作为请求者。 倍增强度 PUBLIC 公用STOMP连接/断接的密钥,广播会议 并返回成员+来自请求者-snapshot的会话地图。 心跳扩展 TTL 公开会议.
扩展 JPA 仓库扫描以包含商务包
新的 Kamo 共享图书馆带来 QQ 要求 **************** (中文(简体) ). Media Service只扫描了 donofy.dao.repos,所以豆子不见了 而应用程序无法启动 。 镜像更大的扫描 警卫 服务用途.
在 ChatWebSocket 控制器中恢复 HashMap 导入
上一个重构件已删除 HashMap 导入, 但手柄已切换 方法仍然为打字事件有效载荷构建一个 HashMap,导致 以“ 找不到符号: 类 HashMap” 来失败的 Forgejo 构建 .
在会话创建时主动创建NATS消费者,以防止信息丢失
之前,NATS JetStream 推力消费者只在一个STOMP客户端时创建. 发送/应用/聊天/订阅。 执行政策。 新建, 任何信件发布于 消费者的存在是永久的丢失——导致访客留言和姓名更改。 除非代理商碰巧先被订阅,否则绝不会在卡莫内部出现. - 将NATS订阅逻辑摘录到聊天会订阅管理器(专有) 确保订阅,将ID...
从核心 NATS 中继主题提供
匹配安全服务核心发布: 与调度器订阅 security.them.profile.* 而不是 JetStream(流只覆盖聊天).
在访客票上使用 PublicChatVisitor 显示Name 用于请求者Name
访客推出的门票 硬码请求员到Org系统成员,所以 DTO在请求者栏上刻出兽人所有者的名字。 坠落 返回到 PublicChatVisitor.display Name 当可用时,列表会显示 实际访客(匿名或姓名).
在 GeoLookupService 中建立错误, 并为代理信件添加 NATS 发布
- 在 QQ 中修复可选 vs 列表类型不匹配 - 向媒体管理员提供新闻服务 - 发布到聊天. session.{guid} 之后代理生成一个消息,所以两者都是 代理和访客在不刷新页面的情况下通过STOMP实时看到
Real-time chat delivery, message sides, notifications, and name sync
- Keep NATS subscription alive on client unsubscribe to avoid breaking agent real-time delivery - Tag visitor messages with messageType=VISITOR_MESSAGE in getMe...
将访问者信件标记为 VISTOR MESSAGE 类型, 添加发送者Name 以获取信件
- PublicChatService: 设置消息Type=VISITOR MESSAGE 这样前端可以区分 访问者回应代理商对STOMP专题的回应 - 媒体管理员。 名称字段, 使代理员看到是谁发送的 在 TicketChat 中装入聊天历史时每封消息
Three support/chat issues — NATS relay, auto-popup, topic fallback
1. Switch SupportNotificationService and SupportStompRelayController from JetStream to core NATS — the CHAT_MESSAGES stream only covers chat.> so JetStrea...
Write contact form description as chat message on public ticket creation
The description was only stored on the ticket entity and never appeared in the chat window. Added writeTextMessage() helper and call it after the system event s...
Add debug logging and robust rights parsing for webinar controller
Adds info/warn logging for session data and rights on POST /types to diagnose 403 errors. Also adds fallback parsing for rights stored as JSON strings in Redis ...
Resolve org theme backgrounds not appearing in meet virtual backgrounds
- Add domain-based theme URL resolution for internal K8s service-to-service calls - getPublicBackgrounds now accepts optional domain param to derive correct the...
Upload meet backgrounds to public MinIO bucket with hash-based naming
Was uploading to private 'imaging-meet-recordings' bucket via **************** which caused: - MinIO region mismatch errors on the primary node - Connection tim...
Return serialization-safe Maps instead of raw JPA entities in MeetConfigController
All config/background endpoints were returning raw JPA entities with @ManyToOne(fetch=LAZY) Organization references. Jackson failed to serialize the Hibernate p...
Remove duplicate endpoints from MeetController, add org-themes to MeetConfigController
MeetConfigController already handled config/background endpoints. The duplicate endpoints in MeetController caused ambiguous mapping. Added org-theme background...
Update health probes to HTTP port 80 to match new server config
Startup, readiness, and liveness probes were still pointing to port 8443 with HTTPS scheme, causing pod restart loops.
Switch MediaService to HTTP port 80 — TLS termination at Traefik
Internal cluster traffic doesn't need HTTPS. Traefik handles TLS for external clients. This aligns MediaService with all other services.
Send chat invites to correct WebSocket topic /topic/chat/incoming/{memberId}
Was publishing to /topic/chat/member/{id} but kamo-internal subscribes to /topic/chat/incoming/{id}. Also fixed Member entity field access **************** inst...
将voip. > 添加到 NATS 流主题中, 并在 VoipStompRelay 控制器中处理非法状态例外
NATS 流只覆盖了聊天. > 因此订阅了voip. " 丢弃 非法状态例外([SUB-90007]) 没有匹配的流). 已添加发音。 " 将两个学科都包括在内,并扩大 抓取块以包含非法状态排除,防止启动失败 如果该流没有可用.
接受 *** 从查询参数获取跨子域 WebSocket 认证
先从 ? QQ 查询参数读取 *** ID, 返回到 饼干 这样可以让内部.kamocrm.com的前端认证 WebSocket连接到media.kamocrm.com 没有跨域饼干. 截取器直接对Redis验证会话.
处理Stale NATS 消费者与独特的消费者重试
- 提取信件处理器到创建 NatsMessageHandler () 方法 - 在“消费者已经绑定”时, 添加带有独有消费名称的重试逻辑 服务器重新启动后发生错误 - 清理动词调试记录
端口443处通过Traefik的WebSocket路线
- service.yaml: 固定端口 80–8443 以匹配 pock 的实际收听端口 - ingressroute.yaml: 后端使用方案 https + 端口 8443 - 服务器 transport.yaml: 为后端 TLS 证书添加不安全的SkipVify - 删除NodePort服务-websocke...
为 NATS 连接使用集群- 内部 DNS
将默认 NATS URL 从 WireGuard IPs (100. 64.x.x) 更改为 nats.kamo.svc. cluster. 本地服务器的本地化. 远程节点 (k0m1,k2m1)仍然保留在有线卫视IP上.
在媒体服务部署中使 TLS 证书具有可选性
- 添加可选内容:对通配符-kamocrm-com 密卷的真实性 - 更新证书转换器内容器,以优雅地处理缺失证书
改进调用启动消息处理和成员查询 - 添加大量记录调用启动消息 - 简化媒体会议成员查询逻辑 - 修复在 Janus 会话创建中的错误
在部署中添加 Janus API 秘密作为环境变量 - 添加 JANUS API SECRET, JANUS TOKEN SECRET, 和 JANUS ADMIN SECRET env vars - 除配置图外,确保通过环境变量获取机密
正确配置 Spring Security for WebSocket - 完全禁用 CSRF, 启用会话创建 IF REQUIRED 为 WebSocket 握手
删除导致编译错误的无效方法调用( GetId on MediaSession, get StatusCode on ServerHttpResponse)
将 WebSocket 中间软件和服务器传输到入侵 Route
- 为WebSocket升级头件添加了媒体-websocket升级中件 - 添加了媒体-websocket-transport以禁用HTTP/2(WebSocket需要HTTP/1.1) - 这样就可以通过Traefik入侵 实现适当的WebSocket连接
WebSocket live message delivery - disable ChatMessageHandler subscription, enhance logging
- Disabled ChatMessageHandler subscription to chat.session.> that was consuming messages without forwarding to WebSocket - Enhanced WebSocketConfig logging to t...
WebSocket persistent connection with aggressive keepalive
Idle timeout set to 0, heartbeat 20s, disconnect delay 30s, match frontend timing
Hardcode SSL settings in ConfigMap for production
- Removed environment variable placeholders - Hardcoded port 8443, SSL enabled, keystore path - Fixes Spring Boot not resolving env vars correctly
Correct Spring Boot SSL environment variable names
- Changed SSL_ENABLED to SERVER_SSL_ENABLED - Changed SSL_KEY_STORE to SERVER_SSL_KEY_STORE - Changed SSL_KEY_STORE_PASSWORD to SERVER_SSL_KEY_STORE_PASSWORD - ...
Use SSLHostConfig API for Tomcat SSL configuration
- Use SSLHostConfig and SSLHostConfigCertificate (correct Tomcat API) - Configure certificate via **************** - Fixes compilation errors with setAttribute/...
Use setAttribute for Tomcat SSL configuration
- Changed from setKeystoreFile/Pass/Type/Alias to setAttribute - Tomcat 10+ uses setAttribute for SSL properties - Fixes compilation errors
Run MediaService on BOTH ports 80 (HTTP API) and 8443 (HTTPS WebSocket)
- Reverted service.yaml and ingressroute.yaml to use port 80 - Removed forced SERVER_PORT and SSL_ENABLED env vars - Added DualPortConfig to programmatically ad...