fix: only show deletion notice when APP_SHOW_DELETION_NOTICE is enabled

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

Author: djaiss

.env.example

@@ -30,6 +30,10 @@ APP_URL=http://localhost:8000
 # Can be true or false. Default to false.
 APP_DISABLE_SIGNUP=false
 
+# Show a notice on the login page warning that this instance and all its data
+# will be deleted. Only meant for the hosted instance. Default to false.
+APP_SHOW_DELETION_NOTICE=false
+
 # Database to store information
 # The documentation is here: https://laravel.com/docs/10.x/database
 # You can also see the different values you can use in config/database.php

app/Http/Controllers/Auth/LoginController.php

@@ -43,6 +43,7 @@ public function __invoke(Request $request): Response
             'wallpaperUrl' => WallpaperHelper::getRandomWallpaper(),
             'providers' => $providers,
             'beta' => $request->cookie('beta') !== 'false',
+            'showDeletionNotice' => (bool) config('monica.show_deletion_notice'),
         ]);
     }
 

config/monica.php

@@ -23,6 +23,17 @@
     */
     'disable_signup' => (bool) env('APP_DISABLE_SIGNUP', false),
 
+    /*
+    |--------------------------------------------------------------------------
+    | Show instance deletion notice
+    |--------------------------------------------------------------------------
+    |
+    | Displays a notice on the login page warning users that this instance
+    | and all its data will be deleted. Meant for the hosted instance only.
+    |
+    */
+    'show_deletion_notice' => (bool) env('APP_SHOW_DELETION_NOTICE', false),
+
     /*
     |--------------------------------------------------------------------------
     | Commit hash of the application

resources/js/Pages/Auth/Login.vue

@@ -23,6 +23,7 @@ const props = defineProps({
   userless: Boolean,
   autologin: Boolean,
   beta: Boolean,
+  showDeletionNotice: Boolean,
 });
 const webauthn = ref(false);
 const publicKeyRef = ref(null);
@@ -89,6 +90,7 @@ const useWebauthn = () => {
     </h1>
 
     <div
+      v-if="showDeletionNotice"
       role="alert"
       class="mt-6 flex w-full items-start gap-3 border border-amber-200 bg-amber-50 px-6 py-4 text-sm text-amber-900 dark:border-amber-800 dark:bg-amber-950 dark:text-amber-100 rounded-lg sm:max-w-4xl">
       <TriangleAlert class="h-5 w-5 shrink-0 text-amber-600 dark:text-amber-400" aria-hidden="true" />

tests/Feature/Auth/AuthenticationTest.php

@@ -4,6 +4,7 @@
 
 use App\Models\User;
 use Illuminate\Foundation\Testing\DatabaseTransactions;
+use Inertia\Testing\AssertableInertia as Assert;
 use PHPUnit\Framework\Attributes\Test;
 use Tests\TestCase;
 
@@ -21,6 +22,31 @@ public function login_screen_can_be_rendered()
         $response->assertStatus(200);
     }
 
+    #[Test]
+    public function deletion_notice_is_hidden_by_default()
+    {
+        $this->withoutVite();
+
+        $this->get('/login')
+            ->assertInertia(fn (Assert $page) => $page
+                ->component('Auth/Login', false)
+                ->where('showDeletionNotice', false)
+            );
+    }
+
+    #[Test]
+    public function deletion_notice_is_shown_when_enabled()
+    {
+        $this->withoutVite();
+        config(['monica.show_deletion_notice' => true]);
+
+        $this->get('/login')
+            ->assertInertia(fn (Assert $page) => $page
+                ->component('Auth/Login', false)
+                ->where('showDeletionNotice', true)
+            );
+    }
+
     #[Test]
     public function users_can_authenticate_using_the_login_screen()
     {