feat: Disable challengeless registration without signing a waiver

This commit is contained in:
timedout committed 2026-08-26 18:01:24 +01:00
1 parent 9deff20f1c
commit dd5b9c6c46
6 files changed
+21 -18

No files matched your search

+1 -4
View File
@@ -255,10 +255,7 @@ async fn create_registration_uiaa_session(
if flows.is_empty() {
// No flows are configured. Bail out by default
// unless open registration was explicitly enabled.
if !services
.config
.yes_i_am_very_very_sure_i_want_an_open_registration_server_prone_to_abuse
{
if !services.config.enable_challengeless_registration() {
return Err!(Request(Forbidden(
"This server is not accepting registrations at this time."
)));