Bootstrap configured admin users

src/app/api/auth/register/route.ts

@@ -1,8 +1,10 @@
 import bcrypt from "bcryptjs";
+import { UserRole } from "@prisma/client";
 import { NextResponse } from "next/server";
 import { z } from "zod";
 import { prisma } from "@/lib/db";
 import { createSession } from "@/lib/auth/session";
+import { isConfiguredAdminEmail } from "@/lib/admin-emails";
 
 const schema = z.object({
   email: z.string().email(),
@@ -12,18 +14,21 @@ const schema = z.object({
 
 export async function POST(req: Request) {
   const body = schema.parse(await req.json());
-  const free = await prisma.plan.findUnique({ where: { code: "FREE" } });
-  if (!free) return NextResponse.json({ error: "PLAN_NOT_SEEDED" }, { status: 500 });
+  const email = body.email.trim().toLowerCase();
+  const isAdmin = isConfiguredAdminEmail(email);
+  const plan = await prisma.plan.findUnique({ where: { code: isAdmin ? "PREMIUM" : "FREE" } });
+  if (!plan) return NextResponse.json({ error: "PLAN_NOT_SEEDED" }, { status: 500 });
 
-  const exists = await prisma.user.findUnique({ where: { email: body.email } });
+  const exists = await prisma.user.findUnique({ where: { email } });
   if (exists) return NextResponse.json({ error: "EMAIL_EXISTS" }, { status: 409 });
 
   const user = await prisma.user.create({
     data: {
-      email: body.email,
-      name: body.name || body.email.split("@")[0],
+      email,
+      name: body.name || email.split("@")[0],
       passwordHash: await bcrypt.hash(body.password, 10),
-      subscription: { create: { planId: free.id, status: "ACTIVE" } }
+      role: isAdmin ? UserRole.ADMIN : UserRole.USER,
+      subscription: { create: { planId: plan.id, status: "ACTIVE" } }
     }
   });
   await createSession(user.id);

src/lib/admin-emails.ts

@@ -0,0 +1,10 @@
+export function getConfiguredAdminEmails() {
+  return (process.env.ADMIN_EMAILS || "")
+    .split(/[\s,;]+/)
+    .map((email) => email.trim().toLowerCase())
+    .filter(Boolean);
+}
+
+export function isConfiguredAdminEmail(email: string) {
+  return getConfiguredAdminEmails().includes(email.trim().toLowerCase());
+}