Function isEmailAllowedForSignup

packages/database/auth/domain-utils.ts:3–19

(
	email: string,
	allowedDomainsConfig?: string,
)

import { z } from "zod";

export function isEmailAllowedForSignup(
	email: string,
	allowedDomainsConfig?: string,
): boolean {
	// If no domain restrictions are configured, allow all signups
	if (!allowedDomainsConfig || allowedDomainsConfig.trim() === "") {
		return true;
	}

	const emailDomain = extractDomainFromEmail(email);
	if (!emailDomain) {
		return false;
	}

	const allowedDomains = parseAllowedDomains(allowedDomainsConfig);
	return allowedDomains.includes(emailDomain.toLowerCase());
}

function extractDomainFromEmail(email: string): string | null {
	// TODO: replace with zod v4's z.email()