如何在Firebase中阻止新用户注册？限定特定用户后关闭注册

Hey there! Let's tackle your two Firebase user registration control questions with practical, actionable steps:

You've got two reliable ways to lock down new sign-ups entirely:

• 直接在Firebase控制台禁用所有登录方式
  This is the quickest, no-code approach. Just head to your Firebase project's console:

  1. Go to the Authentication section
  2. Switch to the Sign-in method tab
  3. For every enabled provider (like Email/Password, Google, Apple, etc.), click into it and select Disable
     新用户立刻就没法通过任何方式注册了，简单粗暴但有效。

• 用Cloud Functions自动拒绝新用户
  If you need more flexibility (like keeping the sign-up UI visible but blocking submissions), use a beforeCreate auth trigger. This runs before a user is created, so it stops the registration dead in its tracks.

  Here's a sample JavaScript function:

  const functions = require("firebase-functions");
  const admin = require("firebase-admin");
  admin.initializeApp();
  
  exports.blockAllNewSignups = functions.auth.user().beforeCreate((user, context) => {
    throw new functions.auth.HaltedError("新用户注册已被系统禁止");
  });
  

  Deploy this function, and every new sign-up attempt will get rejected with your custom error message.

To cap registrations at exactly 10 users, you'll need a combination of backend enforcement and frontend UI updates:

核心后端控制（必须做，防止前端篡改） #

Use the same beforeCreate trigger, but add a check for the current total number of users. Here's how:

exports.limitTo10Users = functions.auth.user().beforeCreate(async (user, context) => {
  // Fetch the total count of existing users
  const { totalCount } = await admin.auth().listUsers();
  
  // Reject if we've hit the 10-user limit
  if (totalCount >= 10) {
    throw new functions.auth.HaltedError("用户数量已达上限，无法注册新用户");
  }
});

This ensures even if someone tries to bypass your frontend, the backend will block them.

前端优化（提升用户体验） #

To avoid frustrating users, update your frontend to hide or disable the sign-up button once the limit is reached:

• Create a simple Cloud Function that returns the current user count
• Call this function when your app loads
• If the count is 10 or more, hide the sign-up form/button, or show a message like "Registration is closed for now"

注意事项 #

• If you delete users later, the totalCount will decrease, so new sign-ups will be allowed again until you hit 10 again. If you want to permanently close sign-ups after 10 users, you can switch to the first method (disable providers) once the limit is hit.
• Always rely on backend checks first—frontend changes are just for UX, not security.

内容的提问来源于stack exchange，提问作者Gabriel Garrett