- Shipped
- September 28, 2026 at 8:30 PM UTC
- Author
- Kamo
- Commit
- caf8bec
The owner asked for this on 2026-09-28: the Log in and sign-up buttons on www.kamocrm.com open login.kamouniverse.com and register.kamouniverse.com. www.kamocrm.com stays a live KamoCRM product site; the platform's doors moved to the KamoUniverse brand. - rehostAuthLink: a platform auth link (register./login. on either platform apex) goes to the PRIMARY apex's door when the site is served on a platform apex, and to the tenant's own door otherwise, unchanged for white-label tenants. The baked-in hrefs, the markup crawlers and pre-hydration clicks follow, name kamouniverse.com. Links naming the legacy apex are still recognised. - Referral attribution survives the hop to another registrable domain. The kdsc_* cookies are scoped to .kamocrm.com and can't follow, so the code rides as ?discount= (as before) and the visitor GUID as ?vid=. kamo-register adopts vid rather than minting a new identity. The GUID is only added on a cross-domain hop, and a malformed one is never reflected into a link. - CSP connect-src gains the kamouniverse doors and keeps the kamocrm ones (add-only). - check-register-links: the tenant invariant (the link stays under the cookie domain) plus the platform cases, 35 checks.