upstream-rocketchat/apps/meteor/ee/server/hooks/auth/callback.ts

import { MeteorError } from '@rocket.chat/core-services';
import { License } from '@rocket.chat/license';

import { callbacks } from '../../../../server/lib/callbacks';
import { i18n } from '../../../../server/lib/i18n';
import { validateUserRoles } from '../../lib/authorization/validateUserRoles';

License.onInstall(() => {
	callbacks.add(
		'beforeSaveUser',
		async ({ user, oldUser }) => validateUserRoles(user, oldUser),
		callbacks.priority.HIGH,
		'validateUserRoles',
	);
	callbacks.add(
		'afterSaveUser',
		async (user) => {
			await License.shouldPreventAction('activeUsers');

			return user;
		},
		callbacks.priority.HIGH,
		'validateUserRoles',
	);
	callbacks.add(
		'afterDeleteUser',
		async (user) => {
			await License.shouldPreventAction('activeUsers');

			return user;
		},
		callbacks.priority.HIGH,
		'validateUserRoles',
	);

	callbacks.add(
		'afterDeactivateUser',
		async (user) => {
			await License.shouldPreventAction('activeUsers');
			return user;
		},
		callbacks.priority.HIGH,
		'validateUserStatus',
	);

	callbacks.add(
		'beforeActivateUser',
		async () => {
			if (await License.shouldPreventAction('activeUsers')) {
				throw new MeteorError('error-license-user-limit-reached', i18n.t('error-license-user-limit-reached'));
			}
			return undefined;
		},
		callbacks.priority.HIGH,
		'validateUserStatus',
	);
});

License.onInvalidate(() => {
	callbacks.remove('beforeSaveUser', 'validateUserRoles');
	callbacks.remove('afterSaveUser', 'validateUserRoles');
	callbacks.remove('afterDeleteUser', 'validateUserRoles');

	callbacks.remove('afterDeactivateUser', 'validateUserStatus');
	callbacks.remove('beforeActivateUser', 'validateUserStatus');
});