Added option to control availability of search API.

Author: shrihari-prakash

src/service/api/user/admin-api/routes.ts

@@ -19,6 +19,7 @@ import GET_SubscriptionTiers from "../shared/subscription-tiers.get";
 import GET_InviteCodes, { GET_InviteCodesValidator } from "../shared/invite-codes.get";
 import PUT_CustomData, { PUT_CustomDataValidator } from "../shared/custom-data.put";
 import GET_LoginHistory, { GET_LoginHistoryValidator } from "../shared/login-history.get";
+import POST_Search, { POST_SearchValidator } from "../search.post";
 
 const AdminApiRouter = express.Router();
 
@@ -46,4 +47,8 @@ if (canUseInviteOnly) {
   AdminApiRouter.post("/invite-codes", ...DelegatedAuthFlow, POST_InviteCodesValidator, POST_InviteCodes);
 }
 
+if (Configuration.get("privilege.can-use-admin-user-search-api")) {
+  AdminApiRouter.post("/search", ...DelegatedAuthFlow, ...POST_SearchValidator, POST_Search);
+}
+
 export default AdminApiRouter;

src/service/api/user/router.ts

@@ -51,11 +51,15 @@ UserRouter.get("/verify-email", ...GET_VerifyEmailValidator, GET_VerifyEmail);
 UserRouter.post("/private", ...DelegatedAuthFlow, ...POST_PrivateValidator, POST_Private);
 UserRouter.get("/code", ...GET_CodeValidator, GET_Code);
 UserRouter.post("/reset-password", ...POST_ResetPasswordValidator, POST_ResetPassword);
-UserRouter.post("/search", ...DelegatedAuthFlow, ...POST_SearchValidator, POST_Search);
 UserRouter.get("/logout", AuthenticateSilent, GET_Logout);
 UserRouter.get("/logout-all", AuthenticateSilent, GET_LogoutAll);
 UserRouter.get("/scopes", GET_Scopes);
 
+// Search
+if (Configuration.get("privilege.can-use-delegated-user-search-api")) {
+  UserRouter.post("/search", ...DelegatedAuthFlow, ...POST_SearchValidator, POST_Search);
+}
+
 // Invite System
 if (Configuration.get("user.account-creation.enable-invite-only")) {
   UserRouter.get("/invite-codes", ...DelegatedAuthFlow, GET_InviteCodes);

src/service/configuration/options.json

@@ -532,6 +532,22 @@
     "default": false,
     "relatedOptions": ["privilege.can-use-cloud-storage"]
   },
+  {
+    "name": "privilege.can-use-delegated-user-search-api",
+    "displayName": "Can Use User Search API (Delegated)",
+    "envName": "CAN_USE_DELEGATED_USER_SEARCH_API",
+    "description": "Specifies if users can search for other users in the system.",
+    "type": "boolean",
+    "default": true
+  },
+  {
+    "name": "privilege.can-use-admin-user-search-api",
+    "displayName": "Can Use User Search API (Admin)",
+    "envName": "CAN_USE_ADMIN_USER_SEARCH_API",
+    "description": "Specifies if admins can search for other users in the system.",
+    "type": "boolean",
+    "default": true
+  },
   {
     "name": "privilege.can-use-cloud-storage",
     "displayName": "Can Use Cloud Storage",