更新

server/app/api/controller/QywxPromotionPublicController.php

@@ -5,6 +5,7 @@ declare(strict_types=1);
 namespace app\api\controller;
 
 use app\common\service\qywx\QywxPromotionRedirectService;
+use app\common\service\qywx\QywxPromotionWidgetService;
 
 /** 企业微信获客助手公开端点：JS 与随机跳转。 */
 class QywxPromotionPublicController extends BaseApiController
@@ -14,31 +15,19 @@ class QywxPromotionPublicController extends BaseApiController
 
     public function script(string $key)
     {
-        if (!QywxPromotionRedirectService::poolExists($key)) {
+        $pool = QywxPromotionRedirectService::publicPoolConfig($key);
+        if ($pool === null) {
             return response('/* promotion pool not found */', 404, ['Content-Type' => 'application/javascript; charset=utf-8']);
         }
-        $goUrl = rtrim($this->request->domain(), '/') . '/api/qywx-promotion/go/' . $key;
-        $jsonKey = json_encode($key, JSON_UNESCAPED_SLASHES | JSON_THROW_ON_ERROR);
-        $jsonGo = json_encode($goUrl, JSON_UNESCAPED_SLASHES | JSON_THROW_ON_ERROR);
-        $javascript = <<<JS
-(function(w,d){
-  'use strict';
-  var key={$jsonKey}, go={$jsonGo};
-  function openPromotion(){
-    var source=w.location.href;
-    w.location.assign(go+'?from='+encodeURIComponent(source));
-  }
-  d.addEventListener('click',function(event){
-    var node=event.target&&event.target.closest?event.target.closest('[data-wecom-promotion="'+key+'"],.wecom-promotion-link[data-pool="'+key+'"]'):null;
-    if(!node){return;}
-    event.preventDefault();
-    event.stopPropagation();
-    openPromotion();
-  },true);
-  w.WecomPromotion=w.WecomPromotion||{};
-  w.WecomPromotion[key]={open:openPromotion};
-})(window,document);
-JS;
+        // 由安装脚本自身的 src 解析 API 域名，避免把请求 Host 写入可公开缓存的 JavaScript。
+        $goUrl = '/api/qywx-promotion/go/' . $key;
+        $config = QywxPromotionWidgetService::decode($pool['widget_config_json'] ?? null);
+        $javascript = QywxPromotionWidgetService::renderScript(
+            $key,
+            $goUrl,
+            $config,
+            (int) ($pool['status'] ?? 0) === 1
+        );
 
         return response($javascript, 200, [
             'Content-Type' => 'application/javascript; charset=utf-8',