Function stagingAccessPlugin

enter.pollinations.ai/src/auth.ts:259–294

* Restricts new signups on staging to explicit GitHub ID or email allowlists. * GitHub IDs are immutable, unlike usernames. No-op outside staging. * * This is a thin UX layer only — it rejects disallowed users during OAuth * before a `user` row is created, so /error shows "staging is invite-only

(env: Cloudflare.Env)

 * blocks spend on the production provider keys held by staging-gen. See #11137.
 */
function stagingAccessPlugin(env: Cloudflare.Env): BetterAuthPlugin {
    if (env.ENVIRONMENT !== "staging") {
        return { id: "staging-access" };
    }
    return {
        id: "staging-access",
        init: () => ({
            options: {
                databaseHooks: {
                    user: {
                        create: {
                            before: async (user: GenericUser) => {
                                try {
                                    assertStagingAccess(env, {
                                        githubId: (
                                            user as { githubId?: number }
                                        ).githubId,
                                        email: user.email,
                                    });
                                } catch (e) {
                                    if (e instanceof StagingAccessDeniedError) {
                                        throw new APIError("FORBIDDEN", {
                                            message: e.message,
                                        });
                                    }
                                    throw e;
                                }
                                return { data: user };
                            },
                        },
                    },
                },
            } satisfies Partial<BetterAuthOptions>,
        }),
    } satisfies BetterAuthPlugin;
}