synapse/changelog.d/6082.feature at 242017db8b7b57be28a019ecbba1619d75d54889 - tileradotorg/synapse - tilera Git

tileradotorg/synapse

forked from MirrorHub/synapse

Andrew Morgan 1b519e0272 Disable /register/available if registration is disabled (#6082 )

Fixes #6066

This register endpoint should be disabled if registration is disabled, otherwise we're giving anyone the ability to check if a username exists on a server when we don't need to be.

Error code is 403 (Forbidden) as that's the same returned by /register when registration is disabled.

2019-09-23 15:38:38 +01:00

1 line

No EOL

70 B

Gherkin

Raw Blame History

Return 403 on `/register/available` if registration has been disabled.