From 9abdd86540575ca69b5b1f8f134b624672184c34 Mon Sep 17 00:00:00 2001
From: DmitrL-dev <84296377+DmitrL-dev@users.noreply.github.com>
Date: Fri, 27 Mar 2026 18:13:17 +1000
Subject: [PATCH] fix: open registration by default and handle slug collision
 gracefully

---
 internal/infrastructure/auth/tenant_handlers.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/infrastructure/auth/tenant_handlers.go b/internal/infrastructure/auth/tenant_handlers.go
index e2e1e5a..855ec1e 100644
--- a/internal/infrastructure/auth/tenant_handlers.go
+++ b/internal/infrastructure/auth/tenant_handlers.go
@@ -23,7 +23,7 @@ type EmailSendFunc func(toEmail, userName, code string) error
 func HandleRegister(userStore *UserStore, tenantStore *TenantStore, jwtSecret []byte, emailFn EmailSendFunc) http.HandlerFunc {
 	return func(w http.ResponseWriter, r *http.Request) {
 		// SEC-M4: Server-side registration gate
-		if os.Getenv("SOC_REGISTRATION_OPEN") != "true" {
+		if os.Getenv("SOC_REGISTRATION_OPEN") == "false" {
 			http.Error(w, `{"error":"registration is closed — contact admin for an invitation"}`, http.StatusForbidden)
 			return
 		}