Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi, When trying to patch the email template config with command "ory patch ...." i get the error -&gt; URL `<http://storage.cloud.google.com>` is not allowed for `courier.templates.recovery.valid.email.body.html`. Does this mean i cannot use google cloud to store email templates ?

:disappointed: we currently block this as we use this ourselves. we should enable it. can you use AWS S3 instead maybe? or a github url?

Which are other blocked domains? I've tried put the templates in the same server of the self service in a custom domain, but I get "is not allowed" error

I was wrong, we currently allow no ULRs, only base64 due to security concerns, but we'll be able to fix that as we have now defense in depth mechanisms