From 0851d6f9523158fba93a76674e317244b22dae20 Mon Sep 17 00:00:00 2001
From: Leopere <colin@nixc.us>
Date: Wed, 4 Mar 2026 18:21:27 -0500
Subject: [PATCH] Fix reset URL: replace %2Flogin encoding in .LinkURL

Authelia URL-encodes the /login path in authelia_url when building
the JWT reset link, producing bc.a250.ca%2Flogin instead of
bc.a250.ca/login. Single replace fixes it without any other mangling.

Made-with: Cursor
---
 .../config/email_templates/IdentityVerificationJWT.html         | 2 +-
 .../authelia/config/email_templates/IdentityVerificationJWT.txt | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/docker/authelia/config/email_templates/IdentityVerificationJWT.html b/docker/authelia/config/email_templates/IdentityVerificationJWT.html
index e0152fa..c231f68 100644
--- a/docker/authelia/config/email_templates/IdentityVerificationJWT.html
+++ b/docker/authelia/config/email_templates/IdentityVerificationJWT.html
@@ -6,7 +6,7 @@
 <p>Hi {{ .DisplayName }},</p>
 <p>You requested to set or reset your password for your <a href="https://bc.a250.ca">a250.ca</a> workspace.</p>
 <p>Click the link below to choose your password. You will also need to enable two-factor authentication or a passkey.</p>
-<p><a href="{{ .LinkURL }}">{{ .LinkText }}</a></p>
+<p><a href="{{ replace "%2Flogin" "/login" .LinkURL }}">{{ .LinkText }}</a></p>
 <p>If you did not request this, you can safely ignore this email &mdash; no changes will be made.</p>
 <p style="color:#888;font-size:0.85em;">Requested from {{ .RemoteIP }}.</p>
 </body>
diff --git a/docker/authelia/config/email_templates/IdentityVerificationJWT.txt b/docker/authelia/config/email_templates/IdentityVerificationJWT.txt
index 8c12ba9..53c5e6c 100644
--- a/docker/authelia/config/email_templates/IdentityVerificationJWT.txt
+++ b/docker/authelia/config/email_templates/IdentityVerificationJWT.txt
@@ -6,7 +6,7 @@ You requested to set or reset your password for your a250.ca workspace (https://
 
 Use the link below to choose your password. You will also need to enable two-factor authentication or a passkey.
 
-{{ .LinkURL }}
+{{ replace "%2Flogin" "/login" .LinkURL }}
 
 If you did not request this, you can safely ignore this email — no changes will be made.