rdmbair15m5-changelog-20260901-1216-eastcoastscience-net-apex-domain-and-oauth-remediation

Remediated apex domain routing for eastcoastscience.net (without www) and resolved Google OAuth configuration handling on Cloudflare Pages.

Scope

• Hosts: rdmbair15m5 (local test & build), rdmsm4x (canonical dev root & deployment).
• Systems: Cloudflare Pages (eastcoastscience-net), Cloudflare DNS (zone b0a852be4eb841783823b7dc36a04881), Edge Middleware (functions/_middleware.ts), OAuth Gate (functions/api/auth/login.ts).

Exact Changes Made

1. Cloudflare Apex Domain Routing:
   • Replaced deactivated placeholder A record on zone b0a852be4eb841783823b7dc36a04881 with proxied CNAME flattening (eastcoastscience.net -> eastcoastscience-net.pages.dev).
   • Re-activated and verified custom domain eastcoastscience.net on Cloudflare Pages project eastcoastscience-net.
2. Canonical Domain & HTTPS Normalization:
   • Updated functions/_middleware.ts to automatically 301 redirect all www.eastcoastscience.net and plain HTTP requests to canonical https://eastcoastscience.net.
3. OAuth Secrets & Error Grace:
   • Injected production cryptographic AUTH_SECRET into Cloudflare Pages deployment configs via API.
   • Refactored functions/api/auth/login.ts to render a styled configuration modal with exact setup guidance instead of unhandled 500 error responses.
4. Deploy & E2E Verification:
   • Built and ran all 6 E2E and privacy boundary test suites (100% green).
   • Deployed live build to Cloudflare Pages eastcoastscience-net (deployment ee06a230).
   • Verified live curls on https://eastcoastscience.net, https://www.eastcoastscience.net, and HTTP upgrade paths.

Verification Evidence

• curl -sI https://eastcoastscience.net -> HTTP/2 401 Access Gate
• curl -sI https://www.eastcoastscience.net -> HTTP/2 301 -> https://eastcoastscience.net/
• curl -sI http://eastcoastscience.net -> HTTP/1.1 301 -> https://eastcoastscience.net/
• npm test -> 65/65 tests passed across 6 test suites with 0 privacy leaks.