Skip to content

Public self-serve registration

POST
/auth/register

Requires PUBLIC_REGISTRATION_ENABLED=true. Creates a user with approvalStatus: PENDING and isActive: false. Returns 403 with code registration_disabled when disabled. Approval via PATCH /internal/users/{id} when RBAC allows.

object
email
required
string format: email
password
required
string
>= 8 characters
fullName
required
string
phoneNumber

Optional; empty string omitted

string
profilePictureUrl
string
authProvider

Identity provider for this account; OAuth flows (e.g. google) will use this when implemented

string
default: password
Allowed values: password google microsoft sso other

Registration received (pending approval)

object
success
required
boolean
data
required
data
object
email
required
string format: email
status
required

Awaits platform staff approval

string
Allowed values: pending

Validation error

object
success
required
boolean
error
required
object
code
required
string
Example
validation_error
message
required
string

Public registration disabled (registration_disabled)

object
success
required
boolean
error
required
object
code
required
string
Example
validation_error
message
required
string

Conflict (e.g. duplicate email)

object
success
required
boolean
error
required
object
code
required
string
Example
validation_error
message
required
string