Files
felhom.eu/documentation/audits/signup-lock-2026-09-29/B/direct.sh
T

7 lines
896 B
Bash

# A stranger's sign-up sent STRAIGHT to the app on the docker network (past traefik and any address block): only the
# app's own switch can refuse it. calcom, gitea, gramps-web run with their switch ON from install here.
c() { printf '%s -> ' "$1"; shift; docker exec felhom-controller curl -s -m 8 -o /tmp/d.b -w '%{http_code}' "$@"; echo " $(head -c 120 /tmp/d.b | tr '\n' ' ')"; docker exec felhom-controller rm -f /tmp/d.b 2>/dev/null; }
c "calcom POST /api/auth/signup" -X POST -H 'Content-Type: application/json' -d '{"username":"strngr1","email":"s1@x.hu","password":"Xx12345678z!A"}' http://calcom:3000/api/auth/signup
c "gitea GET /user/sign_up" http://gitea:3000/user/sign_up
c "gramps-web POST /api/users/strngr1/register/" -X POST -H 'Content-Type: application/json' -d '{"email":"s1@x.hu","password":"Xx12345678z","full_name":"S"}' http://gramps-web:5000/api/users/strngr1/register/