Add register-photo endpoint for unauthenticated post-registration avatar upload

FeatureSecurityService
Shipped
2026年4月18日 18:56 UTC
Author
Kamo
Commit
285d3cc

POST **************** accepts userId + file/fileSm/fileMd/fileLg without a session. Guards: user must be unverified and have no avatar yet, preventing abuse against existing accounts. Stores files to MinIO with the same path structure and sized variants as the authenticated /avatars/photo endpoint.

All changes

就像你看到的运输?

每一个都自动更新您工作空间的地盘。 开始自由,看它成长 一周又一周.

永远开始自由查看定价