Fix reset link logic to include /auth when no configured auth-host.

2025-10-02 15:57:20 -06:00
parent 5d8304bbd9
commit bb35e57ba4
5 changed files with 25 additions and 20 deletions
--- a/passkey/fastapi/api.py
+++ b/passkey/fastapi/api.py
@@ -274,8 +274,9 @@ async def api_create_link(request: Request, auth=Cookie(None)):
        expires=expires(),
        info=session.infodict(request, "device addition"),
    )
-    base = hostutil.auth_site_base_url(request.url.scheme, request.headers.get("host"))
-    url = f"{base}{token}"
+    url = hostutil.reset_link_url(
+        token, request.url.scheme, request.headers.get("host")
+    )
    return {
        "message": "Registration link generated successfully",
        "url": url,