Add option to automatically disable newly created accounts

.env.example

@@ -73,6 +73,8 @@ VITE_PUSHER_PORT="${PUSHER_PORT}"
 VITE_PUSHER_SCHEME="${PUSHER_SCHEME}"
 VITE_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}"
 
+AUTH_NEW_USERS_ENABLED=true
+
 TELESCOPE_ENABLED=true
 TELESCOPE_FILTERING_ENABLED=true
 TELESCOPE_LOG_LEVEL=error

app/Http/Controllers/Auth/RegisteredUserController.php

@@ -10,7 +10,6 @@
 use Illuminate\Http\RedirectResponse;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
-use Illuminate\Support\Facades\Hash;
 use Illuminate\Support\Facades\Lang;
 use Illuminate\Validation\Rules\Password;
 use Illuminate\Validation\ValidationException;
@@ -39,12 +38,15 @@ public function store(Request $request): RedirectResponse
             'password' => ['required', 'confirmed', Password::defaults()],
         ]);
 
-        $user = User::create([
+        $user = new User([
             'username' => $request->username,
             'email' => $request->email,
-            'password' => Hash::make($request->password),
+            'password' => $request->password,
         ]);
 
+        $user->is_enabled = (bool)config('auth.new_users_enabled');
+        $user->save();
+
         event(new Registered($user));
 
         Auth::login($user);

app/Http/Controllers/ExternalAuth/ExternalAuthController.php

@@ -58,6 +58,7 @@ public function callback(): RedirectResponse
                     'password' => $password,
                 ]);
 
+                $user->is_enabled = (bool)config('auth.new_users_enabled');
                 $user->email_verified_at = Carbon::now();
                 $user->save();
 

config/auth.php

@@ -117,4 +117,16 @@
 
     'password_timeout' => 10800,
 
+    /*
+    |--------------------------------------------------------------------------
+    | New Users Enabled
+    |--------------------------------------------------------------------------
+    |
+    | Define whether newly registered users should be enabled by default.
+    | Please note that "everestserver:create-user" command is exempted from this policy.
+    |
+    */
+
+    'new_users_enabled' => env('AUTH_NEW_USERS_ENABLED', true),
+
 ];