Add register-photo endpoint for unauthenticated post-registration avatar upload

Dikirim

18 April 2026 pukul 18.56 UTC

Penulis

Kamo

Berkomitmen

285d3cc

POST **************** accepts userId + file/fileSm/fileMd/fileLg without a session. Guards: user must be unverified and have no avatar yet, preventing abuse against existing accounts. Stores files to MinIO with the same path structure and sized variants as the authenticated /avatars/photo endpoint.