Change record status: 
Project: 
Introduced in branch: 
8.3.x
Introduced in version: 
8.3.0
Description: 

The UserRegistrationResource @RestResource plugin was added to Drupal 8 core — it's available at /user/register.

(Authenticated users can never register new users; to do that, they have to create a new user via the EntityResource at /user.)

This means that progressively or fully decoupled Drupal 8 sites can now let users register without having to create complex work-arounds.

See https://www.drupal.org/documentation/modules/rest/start on how to configure and interact with REST resources.

Impacts: 
Site builders, administrators, editors
Themers

Comments

Snehal Brahmbhatt’s picture

Yes, you are right.

One more resource added i.e User Registration but path seems missing, please find the attached screenshot.

Apart from this, there is my configuration for new resource i.e User Registeration. Please find the attached screenshot.

Now, while I am trying to execute the below code using Postman:

URL: http://drupal-8.2.x-dev/user/register
Method: POST
Headers: 
Accept: application/json
Content-Type: application/json
Data:
{
 "_links":{"type":{"href":"http://drupal-8.2.x-dev/rest/type/user/user"}},
 "name":{
   "value":"snehal"
 },
 "mail":{
   "value":"snehal.addweb@gmail.com"
 },
 "pass":{
   "value":"testing"
 }

}

It shows me user registration page in response.

Additionally, Here’s the attached screenshot for my users permission to access RESTful APIs.

Please need some quick help.

Thanks!

wim leers’s picture

Because this was not added to Drupal 8.2, but to Drupal 8.3. You must use Drupal 8.3 to be able to use this.

akram zairig’s picture

Hello, after giving the permission Access POST on User registration resource to anonymous users , i was able to register users via via the resouce /user/register?_format=hal_json without any authentication
I wonder if there is a way to add a autorization by token when adding users anonymously via the rest resource ?

usmanjutt84’s picture

What if I need to register a user from a decoupled App (like NextJS) that is built using client secret and ID by an authenticated user and that user with a specific role requests user creation via the same client secret/token because I don't want to create users by any other App.