[chanwoo7]

개요

caquick.site(2026-11-29 만료)에서 caquick.com으로 도메인을 옮기기 위한 BE 준비 작업입니다.

• 새 도메인을 옛 도메인과 나란히 허용만 합니다.
• 운영 주소 전환(APP_ENV의 BACKEND_BASE_URL·FRONTEND_BASE_URL)은 FE 전환과 같은 시간대에 따로 진행합니다.

변경 사항

• CORS 운영 목록: https://caquick.com·https://admin.caquick.com을 추가했습니다. .site는 만료까지 병행합니다.
• 로그인 returnTo 허용 목록: https://caquick.com을 추가했습니다.
• S3 CORS(terraform): allowed_origins에 같은 두 오리진을 추가했습니다. 머지 뒤 terraform apply로 반영합니다.
• 문서: infra/app.env.example·README의 운영 주소를 .com으로 바꿨습니다.

테스트

• CORS 운영 목록에 새 오리진 2개가 들어 있는지 확인합니다(it.each).
• returnTo가 caquick.com·caquick.site 경로면 그대로 쓰는지 확인합니다.
• 반증: 소스 변경을 되돌리면 새 테스트 3건이 실패합니다.

플랜 대조

플랜 1단계 BE PR 불릿	상태
cors-origins.ts에 .com 두 오리진 추가(.site 병행)	한 것
auth.constants.ts returnTo 허용 목록에 https://caquick.com 추가	한 것
terraform/aws.tf S3 CORS 추가 → terraform apply	한 것(apply는 머지 뒤)
infra/app.env.example·README*.md 운영 주소 .com	한 것
회귀 테스트: CORS·returnTo .com 허용	한 것

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: CaQuick/caquick-be
• Branch: feat/domain-caquick-com
• File: .coderabbit.yaml
• Commit: 202472c
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 0fd37767-9d6c-4eef-a267-0dbe2ce2574d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-01T00:56:17.138348Z	202472c	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[github-actions]

🧹 knip — dead-code 리포트

요약 항목 없음

전체 리포트

(knip 출력 없음 — 이슈 0이거나 실행 실패)

청소 후보(오탐 가능) · 기준 docs/guide/architecture-conventions.md

[github-actions]

🩺 NestJS Doctor — 90/100 (Excellent)

진단 493건 (error 13).

Category	error	warning	info
architecture	1	1	44
correctness	0	269	0
performance	0	41	28
schema	0	0	76
security	12	21	0

architecture / security 상위 항목

• error security/security/no-hardcoded-secrets: Variable 'SEED_PASSWORD' appears to contain a hardcoded secret.
• error architecture/architecture/no-manual-instantiation: Manual instantiation of 'OutboxRepository' detected. Use dependency injection instead.
• info architecture/architecture/no-barrel-export-internals: Barrel file re-exports internal type 'IAuditLogRepository'.
• warning security/security/no-exposed-env-vars: Direct 'process.env.NODE_ENV' access in 'AuthController'. Use ConfigService instead.
• warning security/security/require-guards-on-endpoints: Endpoint 'start' has no @UseGuards() at class or method level.
• warning security/security/require-guards-on-endpoints: Endpoint 'callback' has no @UseGuards() at class or method level.
• warning security/security/require-guards-on-endpoints: Endpoint 'refresh' has no @UseGuards() at class or method level.
• warning security/security/require-guards-on-endpoints: Endpoint 'logout' has no @UseGuards() at class or method level.
• warning security/security/require-guards-on-endpoints: Endpoint 'sellerLogin' has no @UseGuards() at class or method level.
• warning security/security/require-guards-on-endpoints: Endpoint 'sellerRefresh' has no @UseGuards() at class or method level.
• warning security/security/require-guards-on-endpoints: Endpoint 'sellerLogout' has no @UseGuards() at class or method level.
• warning security/security/require-guards-on-endpoints: Endpoint 'devIssueToken' has no @UseGuards() at class or method level.
• warning security/security/require-guards-on-endpoints: Endpoint 'adminLogin' has no @UseGuards() at class or method level.
• warning security/security/require-guards-on-endpoints: Endpoint 'adminRefresh' has no @UseGuards() at class or method level.
• warning security/security/require-guards-on-endpoints: Endpoint 'adminLogout' has no @UseGuards() at class or method level.

오탐 포함 가능 · 기준 docs/guide/architecture-conventions.md

[github-actions]

Coverage report

St.❔	Category	Percentage	Covered / Total
🟢	Statements	98.02% (+0.02% 🔼)	10805/11023
🟢	Branches	92.96% (+0.05% 🔼)	4120/4432
🟢	Functions	97.56%	2155/2209
🟢	Lines	98.6% (+0.02% 🔼)	9828/9968

Test suite run success

4318 tests passing in 388 suites.

Report generated by 🧪jest coverage report action from 202472c

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!