2026-09-29 15:40:42 +00:00
1 changed files with 11 additions and 7 deletions
@@ -270,8 +270,12 @@ impl ClientRegistrationHandler for Server {
            false
        };

-        // Check if the account is allowed to override client registration
-        if self
+        // Check if the account is allowed to override client registration.
+        // inbuxa: only while setting up or recovering, when the recovery
+        // administrator signs in before any client is registered (contract C-5)
+        let registry = self.registry();
+        if (registry.is_bootstrap_mode() || registry.is_recovery_mode())
+            && self
                .access_token(account_id)
                .await
                .caused_by(trc::location!())?