feat: support custom domain in TRUSTED_ORIGIN

apps/api/src/utils/origins.ts

@@ -0,0 +1,21 @@
+import {
+  preloadVerifiedCustomDomainOrigins,
+  resolveTrustedBrowserOrigin,
+  trustCustomDomainHostname,
+  untrustCustomDomainHostname
+} from '@cio/db/utils';
+
+import { TRUSTED_ORIGINS } from '@api/constants';
+
+const staticTrustedOriginEntries = TRUSTED_ORIGINS.map((entry) => entry.trim()).filter(Boolean) as readonly string[];
+
+export async function preloadVerifiedCustomDomainOriginsRegistry(): Promise<void> {
+  await preloadVerifiedCustomDomainOrigins();
+}
+
+export function resolveTrustedBrowserOriginForCors(origin: string): string | undefined {
+  console.log('check origin', origin);
+  return resolveTrustedBrowserOrigin(origin, staticTrustedOriginEntries);
+}
+
+export { trustCustomDomainHostname, untrustCustomDomainHostname };