Add register-photo endpoint for unauthenticated post-registration avatar upload

Порезанный

18 апреля 2026 г. в 18:56 UTC

Автор

Kamo

Обещать

285d3cc

POST **************** accepts userId + file/fileSm/fileMd/fileLg without a session. Guards: user must be unverified and have no avatar yet, preventing abuse against existing accounts. Stores files to MinIO with the same path structure and sized variants as the authenticated /avatars/photo endpoint.