LuluandCursor 9a76eaec32 fix(server): trust moeru-ai Cloudflare Workers preview origins (#2513) ...

## Summary

- Auth and API origin policy now trusts `*.moeru-ai.workers.dev`.
- The retired `*.kwaa.workers.dev` suffix is removed. Server-dev
stage-web previews on the moeru-ai Cloudflare account can complete OIDC
login.

## Test plan

- [x] `pnpm exec vitest run server/apps/auth/src/tests/auth.test.ts
server/apps/auth/src/tests/origin.test.ts
server/apps/api/src/utils/tests/origin.test.ts`
- [ ] After deploy, sign in from
https://server-dev-moeru-ai-airi.moeru-ai.workers.dev and confirm
`/auth/callback` is accepted.

## Visual changes

No user-visible changes.


Made with [Cursor](https://cursor.com)

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-10 20:28:17 +08:00

..

api

fix(server): trust moeru-ai Cloudflare Workers preview origins (#2513)

2026-09-10 20:28:17 +08:00

auth

fix(server): trust moeru-ai Cloudflare Workers preview origins (#2513)

2026-09-10 20:28:17 +08:00