KamoCRM

URI-encode WOPISrc + trust all api.* WOPI hosts (multi-tenant)

FixDocsService
Shipped
1 ஜூலை, 2026 அன்று 1:24 AM UTC
Author
Sage
Commit
45421bb

Opening a doc for a non-kamocrm tenant failed with 'unauthorized WOPI host'. Docs's alias_groups only trusted api.kamocrm.com (the Docs-deployment env hardcoded aliasgroup1), so multi-tenant WOPISrc hosts like api.optionone.com were rejected. And coolwsd warned that WOPISrc must be URI-encoded. - buildDocsUrl: URI-encode WOPISrc (unencoded breaks through proxies/LBs). - Docs-deployment: aliasgroup1 -> regex 'https://api\..*' to trust every api.<tenant-domain>. The signed WOPI JWT remains the real auth gate.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing