Validate admin key on register

This commit is contained in:
2026-01-29 01:18:34 +01:00
parent 60191a1fe3
commit c318cfd120
2 changed files with 8 additions and 2 deletions

2
API.md
View File

@@ -7,7 +7,7 @@ POST /api/auth/register
POST /api/auth/login
POST /api/auth/logout
- Register accepts optional `adminKey`; when it matches `ADMIN_PASSWORD`, the account is marked `IsAdmin=true` and can use admin APIs.
- Register accepts optional `adminKey`; when it matches `ADMIN_PASSWORD`, the account is marked `IsAdmin=true` and can use admin APIs. If an `adminKey` is supplied but wrong (or ADMIN_PASSWORD unset), registration returns 400.
## State
GET /api/state (public)