- Shipped
- July 1, 2026 at 1:24 AM UTC
- Author
- Sage
- Commit
- 45421bb
Opening a doc for a non-kamocrm tenant failed with 'unauthorized WOPI host'. Docs's alias_groups only trusted api.kamocrm.com (the Docs-deployment env hardcoded aliasgroup1), so multi-tenant WOPISrc hosts like api.optionone.com were rejected. And coolwsd warned that WOPISrc must be URI-encoded. - buildDocsUrl: URI-encode WOPISrc (unencoded breaks through proxies/LBs). - Docs-deployment: aliasgroup1 -> regex 'https://api\..*' to trust every api.<tenant-domain>. The signed WOPI JWT remains the real auth gate.