- Shipped
- August 26, 2026 at 5:10 AM UTC
- Author
- Kamo
- Commit
- 3a9dbcf
The sign-in screen paints an organization's branding from theme.<its own domain>. That domain may not resolve: an org can exist and be signed into before its DNS is configured, so the browser was asking for a host that does not exist and the screen fell back to the platform's logo and colours. MinIO serves the whole bucket from every theme.<apex> name — the folder is what names the organization — so the assets are requested from the apex actually serving the page, which by definition resolves and has a certificate. Only the recorded organization's path changes; a caller naming a host explicitly still gets that host.