- Shipped
- May 12, 2026 at 7:01 AM UTC
- Author
- kamo
- Commit
- 1fd85cc
getThemePath() was reducing the hostname to apex+tld (mainDomain.tld) for both the themed host AND the bucket folder. For subdomain tenants like gnosia.demo.kamocrm.com that share a parent's apex, this folded them into the parent's bucket (kamocrm-com) and they always saw the parent's logo and colors, even though their assets were correctly provisioned to public/gnosia-demo-kamocrm-com/ by SecurityService. Now drop only the deepest alias of the hostname (internal/login/api/...) and use the remaining FQDN as the bucket folder name, matching **************** The themed host still uses apex+tld for DNS predictability via the Traefik theme route. Applies the same correction to getThemePublicBaseForDomain (network page) and the inline duplicate logic in SettingsView's security provider logo loader.