Fixes Issue #66 : Added a switch on dashboard to disable new signups but keep allowing logins

packages/stack-server/prisma/migrations/20240611063825_sign_up_enable/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "ProjectConfig" ADD COLUMN     "signUpEnabled" BOOLEAN NOT NULL DEFAULT true;

packages/stack-server/prisma/schema.prisma

@@ -42,6 +42,7 @@ model ProjectConfig {
   allowLocalhost     Boolean
   credentialEnabled  Boolean
   magicLinkEnabled   Boolean
+  signUpEnabled      Boolean @default(true)
   createTeamOnSignUp Boolean
 
   projects             Project[]

packages/stack-server/prisma/seed.ts

@@ -58,6 +58,7 @@ async function seed() {
           },
           credentialEnabled: true,
           magicLinkEnabled: true,
+          signUpEnabled: true,
           createTeamOnSignUp: false,
         },
       },

packages/stack-server/src/app/(main)/(protected)/(outside-dashbaord)/new-project/page-client.tsx

@@ -40,6 +40,7 @@ export default function PageClient () {
     id: "id",
     credentialEnabled: form.watch("signInMethods").includes("credential"),
     magicLinkEnabled: form.watch("signInMethods").includes("magicLink"),
+    signUpEnabled:true,
     oauthProviders: (["google", "facebook", "github", "microsoft"] as const).map(provider => ({
       id: provider,
       enabled: form.watch("signInMethods").includes(provider),
@@ -56,6 +57,7 @@ export default function PageClient () {
         config: {
           credentialEnabled: values.signInMethods.includes("credential"),
           magicLinkEnabled: values.signInMethods.includes("magicLink"),
+          signUpEnabled:true,
           oauthProviders: (["google", "facebook", "github", "microsoft"] as const).map(provider => ({
             id: provider,
             enabled: values.signInMethods.includes(provider),

packages/stack-server/src/app/(main)/(protected)/projects/[projectId]/auth-methods/page-client.tsx

@@ -55,8 +55,22 @@ export default function PageClient() {
               });
             }}
           />;
-        })}      
+        })}
       </SettingCard>
-    </PageLayout>
+
+      <SettingCard title="User Settings" description="Toggle to enable/disable new User Sign-up">
+      <SettingSwitch
+        label="Signup"
+        checked={project.evaluatedConfig.signUpEnabled}
+        onCheckedChange={async (checked) => {
+          await project.update({
+            config: {
+              signUpEnabled: checked,
+            },
+          });
+        }}
+      />
+    </SettingCard>
+    </PageLayout >
   );
 }

packages/stack-server/src/app/api/v1/auth/callback/[provider]/route.tsx

@@ -99,6 +99,10 @@ export const GET = deprecatedSmartRouteHandler(async (req: NextRequest, options:
     throw new StatusError(StatusError.NotFound, "Provider not found or not enabled");
   }
 
+  if (!project.evaluatedConfig.signUpEnabled) {
+    throw new StatusError(StatusError.Forbidden, "new signup is not enabled");
+  }
+
   const userInfo = await getProvider(provider).getCallback({
     codeVerifier: innerCodeVerifier,
     state: innerState,

packages/stack-server/src/app/api/v1/auth/send-magic-link/route.tsx

@@ -47,6 +47,10 @@ export const POST = deprecatedSmartRouteHandler(async (req: NextRequest) => {
     throw new StatusError(StatusError.Forbidden, "Magic link is not enabled for this project");
   }
 
+  if (!project.evaluatedConfig.signUpEnabled) {
+    throw new StatusError(StatusError.Forbidden, "new signup is not enabled");
+  }
+
   const users = await prismaClient.projectUser.findMany({
     where: {
       projectId,

packages/stack-server/src/app/api/v1/auth/signup/route.tsx

@@ -58,6 +58,10 @@ export const POST = deprecatedSmartRouteHandler(async (req: NextRequest) => {
     throw new StatusError(StatusError.Forbidden, "Password authentication is not enabled");
   }
 
+  if (!project.evaluatedConfig.signUpEnabled) {
+    throw new StatusError(StatusError.Forbidden, "new signup is not enabled");
+  }
+
   if (
     !validateUrl(
       emailVerificationRedirectUrl,

packages/stack-server/src/app/api/v1/projects/[projectId]/route.tsx

@@ -56,6 +56,7 @@ const handler = deprecatedSmartRouteHandler(async (req: NextRequest, options: {
       id: project.id,
       credentialEnabled: project.evaluatedConfig.credentialEnabled,
       magicLinkEnabled: project.evaluatedConfig.magicLinkEnabled,
+      signUpEnabled: project.evaluatedConfig.signUpEnabled,
       oauthProviders: project.evaluatedConfig.oauthProviders.map(
         (provider) => ({
           id: provider.id,

packages/stack-server/src/lib/projects.tsx

@@ -173,6 +173,7 @@ export async function createProject(
             allowLocalhost: projectOptions.config?.allowLocalhost ?? true,
             credentialEnabled: !!projectOptions.config?.credentialEnabled,
             magicLinkEnabled: !!projectOptions.config?.magicLinkEnabled,
+            signUpEnabled: !!projectOptions.config?.signUpEnabled ?? true,
             createTeamOnSignUp: !!projectOptions.config?.createTeamOnSignUp,
             emailServiceConfig: {
               create: {
@@ -469,6 +470,7 @@ export async function updateProject(
     data: { 
       credentialEnabled: options.config?.credentialEnabled,
       magicLinkEnabled: options.config?.magicLinkEnabled,
+      signUpEnabled:options.config?.signUpEnabled,
       allowLocalhost: options.config?.allowLocalhost,
       createTeamOnSignUp: options.config?.createTeamOnSignUp,
     },
@@ -531,6 +533,7 @@ export function projectJsonFromDbType(project: ProjectDB): ProjectJson {
       allowLocalhost: project.config.allowLocalhost,
       credentialEnabled: project.config.credentialEnabled,
       magicLinkEnabled: project.config.magicLinkEnabled,
+      signUpEnabled: project.config.signUpEnabled,
       createTeamOnSignUp: project.config.createTeamOnSignUp,
       domains: project.config.domains.map((domain) => ({
         domain: domain.domain,
@@ -592,6 +595,7 @@ const nonRequiredSchemas = {
     ).optional().default(undefined),
     credentialEnabled: yup.boolean().optional(),
     magicLinkEnabled: yup.boolean().optional(),
+    signUpEnabled: yup.boolean().optional(),
     allowLocalhost: yup.boolean().optional(),
     createTeamOnSignUp: yup.boolean().optional(),
     emailConfig: yup.object({
@@ -628,6 +632,7 @@ export const projectSchemaToUpdateOptions = (
       allowLocalhost: update.config.allowLocalhost,
       credentialEnabled: update.config.credentialEnabled,
       magicLinkEnabled: update.config.magicLinkEnabled,
+      signUpEnabled:update.config.signUpEnabled,
       createTeamOnSignUp: update.config.createTeamOnSignUp,
       oauthProviders: update.config.oauthProviders && update.config.oauthProviders.map((provider) => {
         if (sharedProviders.includes(provider.type as SharedProvider)) {

packages/stack-shared/src/interface/adminInterface.ts

@@ -41,6 +41,7 @@ export type ProjectUpdateOptions = {
     credentialEnabled?: boolean,
     magicLinkEnabled?: boolean,
     allowLocalhost?: boolean,
+    signUpEnabled?: boolean,
     createTeamOnSignUp?: boolean,
     emailConfig?: EmailConfigJson,
   },

packages/stack-shared/src/interface/clientInterface.ts

@@ -41,6 +41,7 @@ export type ClientProjectJson = {
   id: string,
   credentialEnabled: boolean,
   magicLinkEnabled: boolean,
+  signUpEnabled: boolean,
   oauthProviders: {
     id: string,
     enabled: boolean,
@@ -95,6 +96,7 @@ export type ProjectJson = {
     allowLocalhost: boolean,
     credentialEnabled: boolean,
     magicLinkEnabled: boolean,
+    signUpEnabled:boolean,
     oauthProviders: OAuthProviderConfigJson[],
     emailConfig?: EmailConfigJson,
     domains: DomainConfigJson[],

packages/stack/src/lib/stack-app.ts

@@ -830,6 +830,7 @@ class _StackClientAppImpl<HasTokenStore extends boolean, ProjectId extends strin
         id: data.evaluatedConfig.id,
         credentialEnabled: data.evaluatedConfig.credentialEnabled,
         magicLinkEnabled: data.evaluatedConfig.magicLinkEnabled,
+        signUpEnabled:data.evaluatedConfig.signUpEnabled,
         allowLocalhost: data.evaluatedConfig.allowLocalhost,
         oauthProviders: data.evaluatedConfig.oauthProviders,
         emailConfig: data.evaluatedConfig.emailConfig,
@@ -1968,6 +1969,7 @@ export type Project = {
     readonly allowLocalhost: boolean,
     readonly credentialEnabled: boolean,
     readonly magicLinkEnabled: boolean,
+    readonly signUpEnabled: boolean,
     readonly oauthProviders: OAuthProviderConfig[],
     readonly emailConfig?: EmailConfig,
     readonly domains: DomainConfig[],