feat: add DISABLE_SIGNUP environment variable to control signup funct…

…ionality. fixes gitroomhq#480

.env.example

@@ -7,6 +7,7 @@ JWT_SECRET="random string for your JWT secret, make it long"
 FRONTEND_URL="http://localhost:4200"
 NEXT_PUBLIC_BACKEND_URL="http://localhost:3000"
 BACKEND_INTERNAL_URL="http://localhost:3000"
+DISABLE_SIGNUP="false" # set to true to disable signups
 
 ## These are dummy values, you must create your own from Cloudflare.
 ## Remember to set your public internet IP address in the allow-list for the API token.

apps/backend/src/api/routes/auth.controller.ts

@@ -37,6 +37,10 @@ export class AuthController {
     @UserAgent() userAgent: string
   ) {
     try {
+      if (process.env.DISABLE_SIGNUP === 'true') {
+        response.status(400).json({ error: 'Signup is disabled' });
+        return;
+      }
       const getOrgFromCookie = this._authService.getOrgFromCookie(
         req?.cookies?.org
       );

apps/backend/src/services/auth/auth.service.ts

@@ -34,6 +34,10 @@ export class AuthService {
           throw new Error('User already exists');
         }
 
+        if (process.env.DISABLE_SIGNUP === 'true') {
+          throw new Error('Signup is disabled');
+        }
+
         const create = await this._organizationService.createOrgAndUser(
           body,
           ip,
@@ -132,6 +136,10 @@ export class AuthService {
       return user;
     }
 
+    if (process.env.DISABLE_SIGNUP === 'true') {
+      throw new Error('Signup is disabled');
+    }
+
     const create = await this._organizationService.createOrgAndUser(
       {
         company: body.company,