From a4535e0aa3e103f87bae6c3f1a1527588e60208c Mon Sep 17 00:00:00 2001
From: xengineering <me@xengineering.eu>
Date: Mon, 22 Jun 2026 19:57:20 +0200
Subject: Remove registration handler

This should be an admin-only task which should maybe be done via command
line on the server.
---
 handlers.go | 39 ---------------------------------------
 1 file changed, 39 deletions(-)

(limited to 'handlers.go')

diff --git a/handlers.go b/handlers.go
index df1794a..8f3d460 100644
--- a/handlers.go
+++ b/handlers.go
@@ -17,7 +17,6 @@ var frontendEmbed embed.FS
 
 func registerHandlers(r *mux.Router, db *sql.DB) {
 	r.Handle("/api/version", version(db))
-	r.Handle("/api/registration", ApiRegistration(db))
 	r.Handle("/api/authentication", ApiAuthentication(db))
 
 	// frontend must come last to make sure /api takes precedence
@@ -34,44 +33,6 @@ func version(db *sql.DB) http.Handler {
 	})
 }
 
-func ApiRegistration(db *sql.DB) http.Handler {
-	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		var data struct {
-			Username string
-			Password string
-		}
-
-		dec := json.NewDecoder(r.Body)
-		dec.DisallowUnknownFields()
-
-		err := dec.Decode(&data)
-		if err != nil {
-			log.Printf("Failed to decode: %v", err)
-			w.WriteHeader(http.StatusBadRequest)
-			return
-		}
-
-		if data.Username == "" {
-			log.Print("Got registration request with empty username")
-			w.WriteHeader(http.StatusBadRequest)
-			return
-		}
-
-		if data.Password == "" {
-			log.Print("Got registration request with empty password")
-			w.WriteHeader(http.StatusBadRequest)
-			return
-		}
-
-		err = Register(db, data.Username, data.Password)
-		if err != nil {
-			log.Printf("Failed to register new user: %v", err)
-			w.WriteHeader(http.StatusInternalServerError)
-			return
-		}
-	})
-}
-
 func ApiAuthentication(db *sql.DB) http.Handler {
 	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		var data struct {
-- 
cgit v1.3.1