From 6664259e6419a68ff19d3516b5b5bb4228e93b02 Mon Sep 17 00:00:00 2001
From: strawberry <strawberry@puppygock.gay>
Date: Thu, 21 Dec 2023 21:16:56 -0500
Subject: [PATCH] forbid guest users from registering if no real admin user
 exists

Signed-off-by: strawberry <strawberry@puppygock.gay>
---
 src/api/client_server/account.rs | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/src/api/client_server/account.rs b/src/api/client_server/account.rs
index 17410567..ea45a8ca 100644
--- a/src/api/client_server/account.rs
+++ b/src/api/client_server/account.rs
@@ -98,6 +98,15 @@ pub async fn register_route(body: Ruma<register::v3::Request>) -> Result<registe
         ));
     }
 
+    // forbid guests from registering if there is not a real admin user yet. give generic user error.
+    if is_guest && services().users.count()? < 2 {
+        warn!("Guest account attempted to register before a real admin user has been registered, rejecting registration. Guest's initial device name: {:?}", body.initial_device_display_name);
+        return Err(Error::BadRequest(
+            ErrorKind::Forbidden,
+            "Registration temporarily disabled.",
+        ));
+    }
+
     let user_id = match (&body.username, is_guest) {
         (Some(username), false) => {
             let proposed_user_id = UserId::parse_with_server_name(