Can create user without authentication if there is no admin

2025-12-17 22:14:26 +01:00 · 2020-03-18 23:10:15 +09:00
parent 540a31207e
commit e50e3f662d
9 changed files with 189 additions and 46 deletions
--- a/BTCPayServer/Controllers/AccountController.cs
+++ b/BTCPayServer/Controllers/AccountController.cs
@@ -404,6 +404,7 @@ namespace BTCPayServer.Controllers

        [HttpGet]
        [AllowAnonymous]
+        [RateLimitsFilter(ZoneLimits.Register, Scope = RateLimitsScope.RemoteAddress)]
        public async Task<IActionResult> Register(string returnUrl = null, bool logon = true, bool useBasicLayout = false)
        {
            if (!CanLoginOrRegister())