check signups_enabled feature in signup route

1 files changed, 6 insertions, 0 deletions

diff --git a/src/routes/v1/users.rs b/src/routes/v1/users.rs
index 10afc0c..a3f1810 100644
--- a/src/routes/v1/users.rs
+++ b/src/routes/v1/users.rs
@@ -24,6 +24,12 @@ pub async fn create_user(
     Json(signup): Json<requests::Signup>,
     Extension(pool): Extension<Arc<Pool<Postgres>>>,
 ) -> impl IntoResponse {
+    if !(*crate::features::SIGNUPS_ENABLED) {
+        return (
+            StatusCode::BAD_REQUEST,
+            Json(json!({ "error": "Signups are not enabled" })),
+        );
+    }
     // TODO: Potentially more checks for password strength
     if signup.password.len() < 12 {
         return (