early access handler

apps/mail/app/(auth)/login/login-client.tsx

@@ -1,11 +1,11 @@
 'use client';
 
-import { useEffect, type ReactNode, useState } from 'react';
+import { useEffect, type ReactNode, useState, Suspense } from 'react';
 import { Google } from '@/components/icons/icons';
 import { type EnvVarInfo } from '@/lib/auth-providers';
 import { signIn, useSession } from '@/lib/auth-client';
 import { Button } from '@/components/ui/button';
-import { useRouter } from 'next/navigation';
+import { useRouter, useSearchParams } from 'next/navigation';
 import Image from 'next/image';
 import { toast } from 'sonner';
 import Link from 'next/link';
@@ -55,18 +55,23 @@ const getProviderIcon = (providerId: string, className?: string): ReactNode => {
   }
 };
 
-export function LoginClient({ providers, isProd }: LoginClientProps) {
+function LoginClientContent({ providers, isProd }: LoginClientProps) {
   const router = useRouter();
+  const searchParams = useSearchParams();
   const { data: session, isPending } = useSession();
   const [expandedProviders, setExpandedProviders] = useState<Record<string, boolean>>({});
 
   useEffect(() => {
-    const missingProviders = providers.filter((p) => p.required && !p.enabled);
+    const error = searchParams.get('error');
+    if (error === 'early_access_required') {
+      toast.error('This account requires early access approval.');
+    }
 
-    if (missingProviders.length > 0 && missingProviders[0]?.id) {
-      setExpandedProviders({ [missingProviders[0].id]: true });
+    const missing = providers.find((p) => p.required && !p.enabled);
+    if (missing?.id) {
+      setExpandedProviders({ [missing.id]: true });
     }
-  }, [providers]);
+  }, [searchParams, providers, router]);
 
   const missingRequiredProviders = providers
     .filter((p) => p.required && !p.enabled)
@@ -351,3 +356,17 @@ export function LoginClient({ providers, isProd }: LoginClientProps) {
     </div>
   );
 }
+
+export function LoginClient(props: LoginClientProps) {
+  const fallback = (
+    <div className="flex min-h-screen w-full items-center justify-center">
+      <p>Loading...</p>
+    </div>
+  );
+
+  return (
+    <Suspense fallback={fallback}>
+      <LoginClientContent {...props} />
+    </Suspense>
+  );
+}

apps/mail/lib/auth.ts

@@ -91,9 +91,7 @@ const options = {
           .catch((err) =>
             console.log('Tried to add user to earlyAccess after error, failed', foundUser),
           );
-        throw new Error('Unauthorized', {
-          cause: 'No early access found, check logs',
-        });
+        redirect('/login?error=early_access_required');
       }
 
       let activeConnection = null;