Identityserver4.admin: It's possible to register user while it's disabled in configurations

Created on 14 Jan 2021  路  1Comment  路  Source: skoruba/IdentityServer4.Admin

Describe the bug

There is a check to see if registration is enabled here, But it's only for GET requests. There isn't any check for POST requests.

To Reproduce

Send POST request with required parameters to /account/Register.

bug report
Source
picture parrot409

Most helpful comment

Thanks for reporting this issue! I will fix it. 馃憤

picture skoruba on 14 Jan 2021
👍2

>All comments

Thanks for reporting this issue! I will fix it. 馃憤

skoruba picture skoruba on 14 Jan 2021
👍2
Was this page helpful?
0 / 5 - 0 ratings

Related issues

gokayokutucu picture gokayokutucu  路  3Comments
skoruba picture skoruba  路  4Comments
ekjuanrejon picture ekjuanrejon  路  4Comments
yiskang picture yiskang  路  3Comments
weedkiller picture weedkiller  路  4Comments