From e0bb10d5b750940ec0343b6572924faf85e348a7 Mon Sep 17 00:00:00 2001 From: Hampus Date: Sun, 16 Aug 2026 23:34:07 +0200 Subject: [PATCH] fix(api): reject unclaimed guild creation before the email verification gate (#1689) --- fluxer_api/src/api/guild/controllers/GuildBaseController.ts | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/fluxer_api/src/api/guild/controllers/GuildBaseController.ts b/fluxer_api/src/api/guild/controllers/GuildBaseController.ts index af3dfe531..b40059cb4 100644 --- a/fluxer_api/src/api/guild/controllers/GuildBaseController.ts +++ b/fluxer_api/src/api/guild/controllers/GuildBaseController.ts @@ -50,7 +50,9 @@ export function GuildBaseController(app: HonoApp) { if (policy.single_community_enabled) { throw new SingleCommunityCannotCreateGuildsError(); } - requireEmailVerified(user, 'guild_creation'); + if (!user.isUnclaimedAccount()) { + requireEmailVerified(user, 'guild_creation'); + } const auditLogReason = ctx.get('auditLogReason') ?? null; const locale = ctx.get('requestLocale') ?? null; return ctx.json(await ctx.get('guildService').data.createGuild({user, data, locale}, auditLogReason));