fix: require HTTPS for owner activation links
This commit is contained in:
@@ -1436,12 +1436,7 @@ internal sealed class PlatformAdminService(
|
||||
Convert.ToBase64String(value).TrimEnd('=').Replace('+', '-').Replace('/', '_');
|
||||
|
||||
private string BuildOwnerActivationUrl(string host, Guid activationId, string token)
|
||||
{
|
||||
var siteOrigin = provisioning.OwnerActivationUrlTemplate
|
||||
.Replace("{host}", host, StringComparison.Ordinal)
|
||||
.TrimEnd('/');
|
||||
return $"{siteOrigin}/activate/{activationId}#token={token}";
|
||||
}
|
||||
=> TenantOwnerActivationUrlPolicy.Build(provisioning, host, activationId, token);
|
||||
|
||||
private static JsonElement JsonObjectOrDefault(JsonElement value) =>
|
||||
value.ValueKind == JsonValueKind.Object ? value.Clone() : JsonDocument.Parse("{}").RootElement.Clone();
|
||||
|
||||
Reference in New Issue
Block a user