Optional
Must return a trusted externally visible URL; never derive it from untrusted forwarding headers.
Must return a trusted externally visible URL; never derive it from untrusted forwarding headers.