Sign up control

Hey guys. Is there a way to disable sign up from the public (authClient) but still have it enabled for the server code (auth.api)? I don’t want anyone to be able to sign up. I want admins to create users. I’m imagining that a smart person who knows how the auth clients calls the API would be able to create users if it is enabled .

Solution

you can use hooks then

hooks: {
  before: async(c)=>{
    if(c.path === "/sign-up/email" && c.request){
      throw c.error("UNAUTHROIZED")
    }
  }
}

hooks: {
  before: async(c)=>{
    if(c.path === "/sign-up/email" && c.request){
      throw c.error("UNAUTHROIZED")
    }
  }
}

hooks: {
  before: async(c)=>{
    if(c.path === "/sign-up/email" && c.request){
      throw c.error("UNAUTHROIZED")
    }
  }
}

hooks: {
  before: async(c)=>{
    if(c.path === "/sign-up/email" && c.request){
      throw c.error("UNAUTHROIZED")
    }
  }
}

Jump to solution

HHo-kage Hey guys. Is there a way to disable sign up from the public (authClient) but sti...

bekacru•3/8/25, 8:11 PM

emailAndPassword.disableSignUpemailAndPassword.disableSignUp

Ho-kageOP•3/8/25, 8:13 PM

Turning that on also prevented me from creating a user using the sign up on auth.api

Solution

HHo-kage Turning that on also prevented me from creating a user using the sign up on auth...

bekacru•3/8/25, 8:15 PM

you can use hooks then

hooks: {
  before: async(c)=>{
    if(c.path === "/sign-up/email" && c.request){
      throw c.error("UNAUTHROIZED")
    }
  }
}

hooks: {
  before: async(c)=>{
    if(c.path === "/sign-up/email" && c.request){
      throw c.error("UNAUTHROIZED")
    }
  }
}

Ho-kageOP•3/8/25, 8:17 PM

Alright. I’ll try this out. Thank you

Ho-kageOP•3/8/25, 8:53 PM

I wonder if this would be a cleaner way to implement what I was describing. I just need to check if it still allows the auth.api sign up to work

HHo-kage I wonder if this would be a cleaner way to implement what I was describing. I ju...

Ho-kageOP•3/9/25, 8:50 AM

This didn't work

Bbekacru you can use hooks then ```ts hooks: { before: async(c)=>{ if(c.path === "...

Ho-kageOP•3/9/25, 8:51 AM

Caveat is that there is no c.path... you would need to use c.request.url. There is allso no c.error

Sign up control

Similar Threads

Similar Threads

Similar Threads