screentinker/frontend
ScreenTinker 4392bb460a Add DISABLE_REGISTRATION env var to block public sign-ups
When DISABLE_REGISTRATION=true (or 1), POST /api/auth/register returns
403 with a clear error. OAuth endpoints (/google, /microsoft) also
refuse to auto-create new accounts — existing OAuth users can still
sign in. First-user setup (empty users table) is always allowed so a
fresh install can still be initialized.

GET /api/auth/config now returns registration_enabled so the login
view can hide the "Create Account" button and the trial banner when
registration is off. Absence of the flag is treated as enabled for
back-compat with older servers.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-22 19:35:32 -05:00
..
assets Landing: replace iframe mock with dashboard screenshot 2026-04-21 19:47:13 -05:00
css QA fixes: toast aria-live + scope playlist flex-wrap to mobile 2026-04-21 16:00:41 -05:00
js Add DISABLE_REGISTRATION env var to block public sign-ups 2026-04-22 19:35:32 -05:00
legal Initial open source release 2026-04-08 12:14:53 -05:00
index.html Mobile: sidebar polish (Commit 1/4) 2026-04-21 15:49:49 -05:00
landing.html SEO: open-source positioning, GitHub links, OG image, semantic <main> 2026-04-21 19:56:22 -05:00
manifest.json Initial open source release 2026-04-08 12:14:53 -05:00
robots.txt Initial open source release 2026-04-08 12:14:53 -05:00
sitemap.xml SEO: open-source positioning, GitHub links, OG image, semantic <main> 2026-04-21 19:56:22 -05:00
sw-admin.js Initial open source release 2026-04-08 12:14:53 -05:00