Gate registration to ALLOWED_REGISTRATION_EMAIL

app/test/firehose_web/controllers/user_registration_controller_test.exs

@@ -23,6 +23,8 @@ defmodule FirehoseWeb.UserRegistrationControllerTest do
     @tag :capture_log
     test "creates account but does not log in", %{conn: conn} do
       email = unique_user_email()
+      Application.put_env(:firehose, :allowed_registration_email, email)
+      on_exit(fn -> Application.delete_env(:firehose, :allowed_registration_email) end)
 
       conn =
         post(conn, ~p"/users/register", %{
@@ -37,6 +39,9 @@ defmodule FirehoseWeb.UserRegistrationControllerTest do
     end
 
     test "render errors for invalid data", %{conn: conn} do
+      Application.put_env(:firehose, :allowed_registration_email, "with spaces")
+      on_exit(fn -> Application.delete_env(:firehose, :allowed_registration_email) end)
+
       conn =
         post(conn, ~p"/users/register", %{
           "user" => %{"email" => "with spaces"}
@@ -47,4 +52,29 @@ defmodule FirehoseWeb.UserRegistrationControllerTest do
       assert response =~ "must have the @ sign and no spaces"
     end
   end
+
+  describe "POST /users/register with email gating" do
+    test "succeeds when email matches ALLOWED_REGISTRATION_EMAIL", %{conn: conn} do
+      Application.put_env(:firehose, :allowed_registration_email, "allowed@example.com")
+      on_exit(fn -> Application.delete_env(:firehose, :allowed_registration_email) end)
+
+      conn = post(conn, ~p"/users/register", %{"user" => %{"email" => "allowed@example.com"}})
+      assert Phoenix.Flash.get(conn.assigns.flash, :info) =~ "email was sent"
+    end
+
+    test "fails with invite-only message when email doesn't match", %{conn: conn} do
+      Application.put_env(:firehose, :allowed_registration_email, "allowed@example.com")
+      on_exit(fn -> Application.delete_env(:firehose, :allowed_registration_email) end)
+
+      conn = post(conn, ~p"/users/register", %{"user" => %{"email" => "other@example.com"}})
+      assert html_response(conn, 200) =~ "registration is invite only"
+    end
+
+    test "fails with invite-only message when env var is unset", %{conn: conn} do
+      Application.delete_env(:firehose, :allowed_registration_email)
+
+      conn = post(conn, ~p"/users/register", %{"user" => %{"email" => "anyone@example.com"}})
+      assert html_response(conn, 200) =~ "registration is invite only"
+    end
+  end
 end