From 4d8000e331196fcde47894ed7ee99e853bb8785c Mon Sep 17 00:00:00 2001
From: x032205 <x032205@gmail.com>
Date: Sat, 19 Jul 2025 02:41:41 -0400
Subject: [PATCH] License check on fnGetGatewayClientTlsByGatewayId

---
 backend/src/ee/services/gateway/gateway-service.ts | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/backend/src/ee/services/gateway/gateway-service.ts b/backend/src/ee/services/gateway/gateway-service.ts
index 762be864d..5c8ad80bf 100644
--- a/backend/src/ee/services/gateway/gateway-service.ts
+++ b/backend/src/ee/services/gateway/gateway-service.ts
@@ -566,6 +566,14 @@ export const gatewayServiceFactory = ({
     if (!gateway) throw new NotFoundError({ message: `Gateway with ID ${gatewayId} not found.` });
 
     const orgGatewayConfig = await orgGatewayConfigDAL.findById(gateway.orgGatewayRootCaId);
+
+    const orgLicensePlan = await licenseService.getPlan(orgGatewayConfig.orgId);
+    if (!orgLicensePlan.gateway) {
+      throw new BadRequestError({
+        message: "Please upgrade your instance to Infisical's Enterprise plan to use gateways."
+      });
+    }
+
     const { decryptor: orgKmsDecryptor } = await kmsService.createCipherPairWithDataKey({
       type: KmsDataKey.Organization,
       orgId: orgGatewayConfig.orgId