Accept an explicit org, not only the host

FeatureSecurityService
Shipped
August 25, 2026 at 1:14 AM UTC
Author
Kamo
Commit
1e6fb41

Registration bound the account to whatever organization the host resolved to. On register.kamocrm.com — the signup page for every organization with no register host of its own — that is the platform organization, so every one of those signups created the account in the wrong place. An org named in the body now wins, resolved through OrgResolutionService by id or alias, falling back to the host lookup exactly as before when none is given. Same shape as the sign-in hint, and the same rule: it decides which organization the account is created under, as the host did, and every gate below it is untouched. Verified on a clean clone: 953 tests pass. (The working tree carries another session's in-flight PHI work, which fails 63 unrelated tests there.)

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing