Fix reset link logic to include /auth when no configured auth-host.

passkey/fastapi/admin.py

@@ -357,8 +357,9 @@ async def admin_create_user_registration_link(
         expires=expires(),
         info={"type": "device addition", "created_by_admin": True},
     )
-    base = hostutil.auth_site_base_url(request.url.scheme, request.headers.get("host"))
-    url = f"{base}{token}"
+    url = hostutil.reset_link_url(
+        token, request.url.scheme, request.headers.get("host")
+    )
     return {"url": url, "expires": expires().isoformat()}
 
 

passkey/fastapi/api.py

@@ -274,8 +274,9 @@ async def api_create_link(request: Request, auth=Cookie(None)):
         expires=expires(),
         info=session.infodict(request, "device addition"),
     )
-    base = hostutil.auth_site_base_url(request.url.scheme, request.headers.get("host"))
-    url = f"{base}{token}"
+    url = hostutil.reset_link_url(
+        token, request.url.scheme, request.headers.get("host")
+    )
     return {
         "message": "Registration link generated successfully",
         "url": url,

passkey/fastapi/reset.py

@@ -69,8 +69,7 @@ async def _create_reset(user, role_name: str):
         expires=_authsession.expires(),
         info={"type": "manual reset", "role": role_name},
     )
-    base = hostutil.auth_site_base_url()
-    return f"{base}{token}", token
+    return hostutil.reset_link_url(token), token
 
 
 async def _main(query: str | None) -> int: