feat: auto enroll into org as student and oauth improvements

apps/api/src/app.ts

@@ -86,7 +86,25 @@ export const app = new Hono()
     })
   )
   .use('/api/auth/sign-up/*', signupGuard)
-  .on(['POST', 'GET'], '/api/auth/*', (c) => auth.handler(c.req.raw))
+  .on(['POST', 'GET'], '/api/auth/*', (c) => {
+    // Behind the Cloudflare Worker proxy the raw Request URL points at the
+    // upstream `.onrender.com` host. Better Auth (and the oauth-proxy plugin)
+    // need the original tenant/admin host to construct correct OAuth callback
+    // URLs and to decide whether to engage the proxy flow. Rebuild from
+    // X-Forwarded-Host / X-Forwarded-Proto when present.
+    let request = c.req.raw;
+    const fwdHost = c.req.header('x-forwarded-host');
+    const fwdProto = c.req.header('x-forwarded-proto');
+    if (fwdHost) {
+      const url = new URL(request.url);
+      url.host = fwdHost;
+      if (fwdProto === 'https' || fwdProto === 'http') {
+        url.protocol = `${fwdProto}:`;
+      }
+      request = new Request(url, request);
+    }
+    return auth.handler(request);
+  })
   .get('/session', async (c) => {
     const session = c.get('session');
     const user = c.get('user');

apps/api/src/services/widget-payload.ts

@@ -3,6 +3,7 @@ import { getActiveOrganizationPlan, getOrganizationById } from '@cio/db/queries/
 import { getCourseTagsByCourseIdsForOrganization, getTagGroupsWithTags } from '@cio/db/queries/tag';
 import { listWidgetCourses } from '@cio/db/queries/widget';
 import { PLAN } from '@cio/utils/plans';
+import { TENANT_ROOT_DOMAIN } from '@cio/utils/constants';
 import {
   buildWidgetPayload as buildWidgetPayloadShared,
   normalizeWidgetConfig,
@@ -148,7 +149,7 @@ export function getCourseBaseUrl(siteName: string, customDomain?: string | null)
     return `https://${customDomain}`;
   }
 
-  return siteName ? `https://${siteName}.classroomio.com` : DEFAULT_WIDGET_APP_BASE_URL;
+  return siteName ? `https://${siteName}.${TENANT_ROOT_DOMAIN}` : DEFAULT_WIDGET_APP_BASE_URL;
 }
 
 export function getCourseWidgetScriptUrl(): string {