feat(signup): allow to block signup (#3209)

* feat(signup): allow to block signup

* feat(signup): update environment variable documentation

* test: update auth service tests

* feat(signup): prevent user from reaching out the sign up page

* Fix lint

* Fixes

---------

Co-authored-by: Charles Bochet <charles@twenty.com>

packages/twenty-server/src/core/auth/services/auth.service.spec.ts

@@ -7,6 +7,7 @@ import { WorkspaceManagerService } from 'src/workspace/workspace-manager/workspa
 import { FileUploadService } from 'src/core/file/services/file-upload.service';
 import { Workspace } from 'src/core/workspace/workspace.entity';
 import { User } from 'src/core/user/user.entity';
+import { EnvironmentService } from 'src/integrations/environment/environment.service';
 
 import { AuthService } from './auth.service';
 import { TokenService } from './token.service';
@@ -46,6 +47,10 @@ describe('AuthService', () => {
           provide: getRepositoryToken(User, 'core'),
           useValue: {},
         },
+        {
+          provide: EnvironmentService,
+          useValue: {},
+        },
       ],
     }).compile();
 

packages/twenty-server/src/core/auth/services/auth.service.ts

@@ -29,6 +29,7 @@ import { UserService } from 'src/core/user/services/user.service';
 import { WorkspaceManagerService } from 'src/workspace/workspace-manager/workspace-manager.service';
 import { getImageBufferFromUrl } from 'src/utils/image';
 import { FileUploadService } from 'src/core/file/services/file-upload.service';
+import { EnvironmentService } from 'src/integrations/environment/environment.service';
 
 import { TokenService } from './token.service';
 
@@ -50,6 +51,7 @@ export class AuthService {
     @InjectRepository(User, 'core')
     private readonly userRepository: Repository<User>,
     private readonly httpService: HttpService,
+    private readonly environmentService: EnvironmentService,
   ) {}
 
   async challenge(challengeInput: ChallengeInput) {
@@ -114,6 +116,12 @@ export class AuthService {
         ForbiddenException,
       );
     } else {
+      assert(
+        !this.environmentService.isSignUpDisabled(),
+        'Sign up is disabled',
+        ForbiddenException,
+      );
+
       const workspaceToCreate = this.workspaceRepository.create({
         displayName: '',
         domainName: '',

packages/twenty-server/src/core/client-config/client-config.entity.ts

@@ -59,6 +59,9 @@ export class ClientConfig {
   @Field(() => Boolean)
   signInPrefilled: boolean;
 
+  @Field(() => Boolean)
+  signUpDisabled: boolean;
+
   @Field(() => Boolean)
   debugMode: boolean;
 

packages/twenty-server/src/core/client-config/client-config.resolver.ts

@@ -26,6 +26,7 @@ export class ClientConfigResolver {
         billingUrl: this.environmentService.getBillingUrl(),
       },
       signInPrefilled: this.environmentService.isSignInPrefilled(),
+      signUpDisabled: this.environmentService.isSignUpDisabled(),
       debugMode: this.environmentService.isDebugMode(),
       support: {
         supportDriver: this.environmentService.getSupportDriver(),