Skip to content

Release 11.13.4#498

Merged
kaihaase merged 1 commit intomainfrom
develop
Feb 7, 2026
Merged

Release 11.13.4#498
kaihaase merged 1 commit intomainfrom
develop

Conversation

@kaihaase
Copy link
Member

@kaihaase kaihaase commented Feb 7, 2026

Add emailAndPassword.disableSignUp to BetterAuth for invite-only apps

…only apps (#496)

* style: format BetterAuth module files with Prettier

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* feat: add emailAndPassword.disableSignUp to BetterAuth for invite-only apps

Adds configurable sign-up disabling via betterAuth.emailAndPassword.disableSignUp.
When enabled, REST and GraphQL sign-up endpoints return LTNS_0026 error while
sign-in continues to work for existing users.

Defense in Depth: Custom ensureSignUpEnabled() check on CoreBetterAuthService
fires before BetterAuth API calls (structured error), native disableSignUp flag
acts as safety net for direct API access.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* 11.13.4

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Kai Haase <kai.haase@lenne.tech>
@kaihaase kaihaase merged commit 6ce9ec7 into main Feb 7, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants