hitsave-io / xyz

Monorepo for HitSave
1 stars 0 forks source link

api: whitelist sign-ups #126

Open seabo opened 1 year ago

seabo commented 1 year ago

Right now, anyone can sign up.

We probably want to lock things down a bit more as we move towards actually publicizing the existence of HitSave to more people. Hopefully, as people learn about it, they will visit the website and join the waitlist. I.e. we should be in closed beta rather than open beta. It doesn't matter yet because no-one is even trying to use the software. When we have v1 ready (with a more polished client and a better web interface), hopefully we can pump up the volume of visitors, and this will become important.

We should have a whitelist of users who are allowed to sign-up. That way, we can allow batches of people onto the system in a controlled way, and avoid potentially malicious users in the early days.

This would just be implemented with a new Postgres table of whitelisted email addresses. The sign-up workflow then checks this table to see if the user is allowed in, and if not we say sorry but add them to the waitlist with a nice message thanking them for their interest and explaining we are in closed beta.