refactor: replace hardcoded custom domain with CUSTOM_DOMAIN env var

- Add CUSTOM_DOMAIN to Env interface (optional)
- oauth-metadata.ts / oauth-authorize.ts read from env.CUSTOM_DOMAIN
- wrangler.toml: CUSTOM_DOMAIN = https://db-card.sfan-tech.com
- Production-portable: set per-environment in wrangler.toml

Author: iim0663418

workers/src/handlers/mcp/oauth-authorize.ts

@@ -52,7 +52,7 @@ export async function handleMcpAuthorize(request: Request, env: Env): Promise<Re
   // Validate resource — must match this server's URL
   const resource = p.get('resource') ?? '';
   const allowedOrigins = [env.WORKER_URL];
-  if (env.ENVIRONMENT === 'staging') allowedOrigins.push('https://db-card.sfan-tech.com');
+  if (env.CUSTOM_DOMAIN) allowedOrigins.push(env.CUSTOM_DOMAIN);
 
   if (resource) {
     // Accept resource as origin or origin+path (e.g. https://host/mcp)

workers/src/handlers/mcp/oauth-metadata.ts

@@ -6,9 +6,8 @@ const CACHE_CONTROL = 'public, max-age=3600';
 /** Use the request's origin so metadata URLs match the domain the client connected to */
 function getBaseUrl(request: Request, env: Env): string {
   const origin = new URL(request.url).origin;
-  // Only allow known origins; fall back to WORKER_URL
   if (origin === env.WORKER_URL) return origin;
-  if (env.ENVIRONMENT === 'staging' && origin === 'https://db-card.sfan-tech.com') return origin;
+  if (env.CUSTOM_DOMAIN && origin === env.CUSTOM_DOMAIN) return origin;
   return env.WORKER_URL;
 }
 

workers/src/types.ts

@@ -17,6 +17,7 @@ export interface Env {
   ORIGIN?: string;
   ENVIRONMENT: 'production' | 'staging';
   WORKER_URL: string;
+  CUSTOM_DOMAIN?: string;  // e.g. https://db-card.sfan-tech.com
   ASSETS: Fetcher;
   GOOGLE_CLIENT_ID: string;
   GOOGLE_CLIENT_SECRET: string;

workers/wrangler.toml

@@ -7,6 +7,7 @@ compatibility_date = "2024-04-03"  # Enable Durable Objects RPC
 [vars]
 ENVIRONMENT = "staging"
 WORKER_URL = "https://db-card-staging.csw30454.workers.dev"
+CUSTOM_DOMAIN = "https://db-card.sfan-tech.com"
 GOOGLE_CLIENT_ID = "675226781448-akeqtr5d603ad0bcb3tve5hl4a8c164u.apps.googleusercontent.com"
 GEMINI_MODEL = "gemini-3-flash-preview"
 GEMINI_LITE_MODEL = "gemini-2.5-flash"