fix: require HTTPS for owner activation links

This commit is contained in:
2026-08-03 09:17:46 +08:00
parent 1d071f02fe
commit 134e96dc69
5 changed files with 107 additions and 9 deletions

View File

@@ -1436,12 +1436,7 @@ internal sealed class PlatformAdminService(
Convert.ToBase64String(value).TrimEnd('=').Replace('+', '-').Replace('/', '_');
private string BuildOwnerActivationUrl(string host, Guid activationId, string token)
{
var siteOrigin = provisioning.OwnerActivationUrlTemplate
.Replace("{host}", host, StringComparison.Ordinal)
.TrimEnd('/');
return $"{siteOrigin}/activate/{activationId}#token={token}";
}
=> TenantOwnerActivationUrlPolicy.Build(provisioning, host, activationId, token);
private static JsonElement JsonObjectOrDefault(JsonElement value) =>
value.ValueKind == JsonValueKind.Object ? value.Clone() : JsonDocument.Parse("{}").RootElement.Clone();