Add register-photo endpoint for unauthenticated post-registration avatar upload

Shipped: April 18, 2026 at 6:56 PM UTC
Author: Kamo
Commit: 285d3cc

POST **************** accepts userId + file/fileSm/fileMd/fileLg without a session. Guards: user must be unverified and have no avatar yet, preventing abuse against existing accounts. Stores files to MinIO with the same path structure and sized variants as the authenticated /avatars/photo endpoint.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free Forever View Pricing