summary refs log tree commit diff
path: root/changelog.d/6082.feature (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Disable /register/available if registration is disabled (#6082)Andrew Morgan2019-09-231-0/+1
Fixes #6066 This register endpoint should be disabled if registration is disabled, otherwise we're giving anyone the ability to check if a username exists on a server when we don't need to be. Error code is 403 (Forbidden) as that's the same returned by /register when registration is disabled.