Function getCustomDomains

packages/server/src/utils/oauth2Security.ts:3–8

()

import { ALLOWED_OAUTH2_TOKEN_FIELDS, DEFAULT_ALLOWED_OAUTH2_DOMAINS } from './constants'

function getCustomDomains(): string[] {
    return (process.env.OAUTH2_ALLOWED_TOKEN_DOMAINS ?? '')
        .split(',')
        .map((d) => d.trim().toLowerCase())
        .filter(Boolean)
}

/**
 * Builds the effective list of allowed OAuth2 token-endpoint domains.