From 5019a7597d8b9e1ebe50e4ad1bf1faa273d23617 Mon Sep 17 00:00:00 2001
From: Sean O'Connor <sean@soconnor.dev>
Date: Thu, 18 Jun 2026 02:27:31 -0400
Subject: [PATCH] Expose public auth capabilities endpoint for mobile SSO
 detection.

Returns whether Authentik and signups are enabled so the app can show the right
sign-in options per instance at runtime.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 src/app/api/auth/capabilities/route.ts | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 src/app/api/auth/capabilities/route.ts

diff --git a/src/app/api/auth/capabilities/route.ts b/src/app/api/auth/capabilities/route.ts
new file mode 100644
index 0000000..20e06c6
--- /dev/null
+++ b/src/app/api/auth/capabilities/route.ts
@@ -0,0 +1,10 @@
+import { NextResponse } from "next/server";
+
+import { env } from "~/env";
+
+export function GET() {
+  return NextResponse.json({
+    authentik: env.NEXT_PUBLIC_AUTHENTIK_ENABLED === true,
+    signupsDisabled: env.DISABLE_SIGNUPS === true,
+  });
+}