fix(backend): update redirect URI patterns for Claude.ai MCP OAuth

Author: Lasim

services/backend/src/services/oauth/authorizationService.ts

@@ -125,8 +125,9 @@ export class AuthorizationService {
       /^vscode:\/\/.*\/auth\/callback$/,
       // Cursor patterns
       /^cursor:\/\/.*\/oauth\/callback$/,
-      // Claude.ai custom connector patterns
-      /^https:\/\/claude\.ai\/mcp\/auth\/callback$/
+      // Claude.ai MCP OAuth callback patterns (RFC 9728 compliant)
+      /^https:\/\/claude\.ai\/api\/mcp\/auth_callback$/,
+      /^https:\/\/claude\.com\/api\/mcp\/auth_callback$/  // Future-proofing for domain migration
     ];
 
     return allowedPatterns.some(pattern => pattern.test(redirectUri));

services/satellite/src/routes/oauth-discovery.ts

@@ -7,7 +7,7 @@ import { type FastifyInstance } from 'fastify';
  */
 export default async function oauthDiscoveryRoutes(server: FastifyInstance) {
   const backendUrl = process.env.DEPLOYSTACK_BACKEND_URL || 'http://localhost:3000';
-  const satelliteUrl = `http://localhost:${process.env.PORT || 3001}`;
+  const satelliteUrl = process.env.DEPLOYSTACK_SATELLITE_URL || `http://localhost:${process.env.PORT || 3001}`;
 
   // RFC 9728: OAuth 2.0 Protected Resource Metadata
   server.get('/.well-known/oauth-protected-resource', {