Add register-photo endpoint for unauthenticated post-registration avatar upload

Shipped

18 aprile 2026 alle ore 18:56 UTC

Author

Kamo

Commit

285d3cc

POST **************** accepts userId + file/fileSm/fileMd/fileLg without a session. Guards: user must be unverified and have no avatar yet, preventing abuse against existing accounts. Stores files to MinIO with the same path structure and sized variants as the authenticated /avatars/photo endpoint.