- Ya
- 25 Agosti 2026, 13:57 UTC
- Mwandishi
- Kamo
- Ahadi ya
- 267f9ba
A member of several organizations now chooses which one to open after their password, instead of it being chosen for them by the hostname. This is the switch that makes an organization without a domain of its own reachable through the front door rather than only from /network. Reached only on the platform host. A custom domain names its organization on its own and skips the picker entirely, and a member of exactly one organization is signed straight in with no extra screen — 17 of 53 users have more than one membership, so most sign-ins are unchanged. Turned on once before and reverted the same hour: the redirect was relative and resolved to login.<apex>/validate, kamo-login's own validate page, which spends the one-time key and returns to the sign-in screen. That would have broken every sign-in on the platform host, not only multi-org ones. Both completion paths now name internal.<apex> explicitly (a26b480) and tests pin the destination. Everything it depends on is live: the split auth and session/select with trial-start and availability parity (604dee2), kamo-login's picker (59e1a7a), kamo-internal taking its organization from the session rather than the host (97cd4a0b), and the redirect fix.