cesnimda
ce76046a29
- consolidate API ownership and remove dead vendor code - add Stripe billing, learning paths, and public CV hardening - add migration, recovery, security, audit, and browser gates
502 B
502 B
signup
Self-service signup uses POST /api/auth/register and the /register frontend route. It is disabled
unless Auth:AllowRegistration/AUTH_ALLOW_REGISTRATION is enabled. When Cloudflare Turnstile keys
are configured, the server validates the widget token through Siteverify before creating the account.
Production activation is intentionally blocked until the operator supplies Turnstile configuration;
see BLOCKERS.md. Email verification can also be required before the first login.