Cloudflare for SaaS：为客户绑定自定义域名的完整实现

CREATE TABLE custom_hostnames (
  id BIGSERIAL PRIMARY KEY,
  tenant_id VARCHAR(255) NOT NULL,
  hostname VARCHAR(255) NOT NULL UNIQUE,
  status VARCHAR(50) DEFAULT 'pending', -- pending/active/error
  ssl_status VARCHAR(50) DEFAULT 'initializing',
  created_at TIMESTAMP DEFAULT NOW(),
  validated_at TIMESTAMP,
  ssl_issued_at TIMESTAMP
);

# 为客户创建自定义域名
curl -X POST "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/custom_hostnames" \
  -H "Authorization: Bearer $API_TOKEN" \
  -H "Content-Type: application/json" \
  --data '{
    "hostname": "app.customer-a.com",
    "ssl": {
      "method": "http",
      "type": "dv",
      "settings": {
        "min_tls_version": "1.2"
      }
    },
    "custom_metadata": {
      "tenant_id": "customer-a"
    }
  }'

# 检查自定义域名的 SSL 状态
curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/custom_hostnames/$HOSTNAME_ID" \
  -H "Authorization: Bearer $API_TOKEN"

# 期望状态
{
  "result": {
    "hostname": "app.customer-a.com",
    "ssl": {
      "status": "active"
    }
  }
}

// workers/index.ts
export default {
  async fetch(request: Request, env: Env): Promise<Response> {
    // 获取客户的 hostname
    const hostname = request.headers.get('Host'); // app.customer-a.com

    // 获取 Cloudflare 注入的 Custom Metadata
    const tenantId = request.headers.get('CF-Custom-Tenant-Id') || 'default';

    // 根据租户 ID 路由到不同内容
    const response = await fetch(`https://origin.my-saas.com${new URL(request.url).pathname}`, {
      headers: {
        'X-Tenant-ID': tenantId,
        'X-Original-Host': hostname,
      },
    });

    return response;
  },
};

// lib/cloudflare-saas.ts
const CF_API_BASE = 'https://api.cloudflare.com/client/v4';

export async function createCustomHostname(hostname: string, tenantId: string) {
  const res = await fetch(`${CF_API_BASE}/zones/${ZONE_ID}/custom_hostnames`, {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${CF_API_TOKEN}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      hostname,
      ssl: {
        method: 'http',
        type: 'dv',
      },
      custom_metadata: {
        tenant_id: tenantId,
      },
    }),
  });

  return await res.json();
}

export async function getCustomHostnameStatus(hostnameId: string) {
  const res = await fetch(`${CF_API_BASE}/zones/${ZONE_ID}/custom_hostnames/${hostnameId}`, {
    headers: { 'Authorization': `Bearer ${CF_API_TOKEN}` },
  });

  const data = await res.json();
  return {
    hostname: data.result.hostname,
    sslStatus: data.result.ssl?.status,
    validationStatus: data.result.status,
  };
}

export async function deleteCustomHostname(hostnameId: string) {
  await fetch(`${CF_API_BASE}/zones/${ZONE_ID}/custom_hostnames/${hostnameId}`, {
    method: 'DELETE',
    headers: { 'Authorization': `Bearer ${CF_API_TOKEN}` },
  });
}