Updating custom domain does not update magic link url correctly
Nobody has claimed this yet.
- Dominant language
- Shell
- Stars
- 96
- Forks
- 8
- PR merge metrics
- No merged PRs in 30d
Description
Preflight checklist
- I could not find a solution in the existing issues, docs, nor discussions.
- I agree to follow this project's Code of Conduct.
- I have read and am following this repository's Contribution Guidelines.
- This issue affects my Ory Network project.
- I have joined the Ory Community Slack.
- I am signed up to the Ory Security Patch Newsletter.
Describe the bug
When updating the custom domain (to another domain), the /selfservice/methods/link/config/base_url value is not properly being set.
Reproducing the bug
- Create a project
- Set a custom domain
- Use magic links
- Send verification email (via oryapis.com, not via custom domains)
- Set new custom domain
- Send verification email (via oryapis.com, not via custom domains)
- Verification link uses old CNAME
Relevant log output
No response
Relevant configuration
No response
Version
master
On which operating system are you observing this issue?
Ory Network
In which environment are you deploying?
Ory Network
Additional Context
There is a workaround - run the following command to reset this config value, which sets it to the correct custom domain:
ory patch identity-config <your-project-id> \
--remove '/selfservice/methods/link/config/base_url'
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the sequence of changing a custom domain and sending verification emails, then inspect how /selfservice/methods/link/config/base_url is updated. Use the documented ory patch identity-config <your-project-id> --remove '/selfservice/methods/link/config/base_url' workaround as a comparison; done means new verification links use the latest custom domain without manual removal.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100