happyz
/
memos
mirror of https://github.com/usememos/memos.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix: allow unauthenticated CreateUser for first user registration 

Add CreateUser to PublicMethods ACL whitelist to fix "authentication required"
error during first-time setup. The CreateUser method already has proper security
logic that automatically assigns HOST role to the first user and enforces
DisallowUserRegistration setting for subsequent users.

Fixes #5352

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
Steven 2025-12-15 23:18:30 +08:00
parent b1a52f20ed
commit 6926764b91
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
server/router/api/v1/acl_config.go
View File

@ -18,6 +18,7 @@ var PublicMethods = map[string]struct{}{
"/memos.api.v1.InstanceService/GetInstanceSetting": {}, "/memos.api.v1.InstanceService/GetInstanceSetting": {},
// User Service - public user profiles and stats // User Service - public user profiles and stats
"/memos.api.v1.UserService/CreateUser": {}, // Allow first user registration
"/memos.api.v1.UserService/GetUser": {}, "/memos.api.v1.UserService/GetUser": {},
"/memos.api.v1.UserService/GetUserAvatar": {}, "/memos.api.v1.UserService/GetUserAvatar": {},
"/memos.api.v1.UserService/GetUserStats": {}, "/memos.api.v1.UserService/GetUserStats": {},

1
server/router/api/v1/acl_config_test.go
View File

@ -16,6 +16,7 @@ func TestPublicMethodsArePublic(t *testing.T) {
"/memos.api.v1.InstanceService/GetInstanceProfile", "/memos.api.v1.InstanceService/GetInstanceProfile",
"/memos.api.v1.InstanceService/GetInstanceSetting", "/memos.api.v1.InstanceService/GetInstanceSetting",
// User Service // User Service
"/memos.api.v1.UserService/CreateUser",
"/memos.api.v1.UserService/GetUser", "/memos.api.v1.UserService/GetUser",
"/memos.api.v1.UserService/GetUserAvatar", "/memos.api.v1.UserService/GetUserAvatar",
"/memos.api.v1.UserService/GetUserStats", "/memos.api.v1.UserService/GetUserStats",