feat(NODE-1978): Custom Domains bypass logic

Cargo.toml

@@ -21,7 +21,7 @@ arrayvec = { version = "0.7", features = ["serde"] }
 async-channel = "2.3.1"
 async-trait = "0.1.83"
 axum = "0.8.1"
-axum-extra = { version = "0.12.6", features = ["middleware"] }
+axum-extra = { version = "0.12.6", features = ["middleware", "typed-header"] }
 axum-server = "0.8.0"
 base64 = "0.23.1"
 bytes = "1.10.0"

custom-domains/api/src/lib.rs

@@ -79,8 +79,10 @@ pub enum TaskKind {
 pub struct InputTask {
     pub kind: TaskKind,
     pub domain: String,
-    // Whether to also include a `*.domain` wildcard SAN in the certificate
+    /// Whether to also include a `*.domain` wildcard SAN in the certificate
     pub wildcard: Option<bool>,
+    /// The canister ID associated with the domain (if known at submission time)
+    pub canister_id: Option<Principal>,
 }
 
 #[derive(CandidType, Deserialize, Serialize, Debug, Clone, PartialEq, Eq, new)]
@@ -91,6 +93,8 @@ pub struct ScheduledTask {
     pub enc_cert: Option<Vec<u8>>,
     // Whether to also include a `*.domain` wildcard SAN in the certificate
     pub wildcard: Option<bool>,
+    /// The canister ID associated with the domain (if known at submission time)
+    pub canister_id: Option<Principal>,
 }
 
 #[derive(CandidType, Deserialize, Serialize, Clone, Debug)]

custom-domains/canister/canister_backend.did

@@ -27,6 +27,8 @@ type InputTask = record {
   domain: text;
   // Whether to also include a *.domain wildcard SAN in the certificate
   wildcard: opt bool;
+  // The canister ID associated with the domain (if known at submission time)
+  canister_id: opt principal;
 };
 
 // Reasons why a task might fail
@@ -99,6 +101,8 @@ type ScheduledTask = record {
   enc_cert: opt blob;
   // Whether to also include a *.domain wildcard SAN in the certificate
   wildcard: opt bool;
+  // The canister ID associated with the domain (if known at submission time)
+  canister_id: opt principal;
 };
 
 // Status of a domain