diff --git a/server/methods/registerUser.js b/server/methods/registerUser.js index d95098efcae06..4dcce06944575 100644 --- a/server/methods/registerUser.js +++ b/server/methods/registerUser.js @@ -46,12 +46,14 @@ Meteor.methods({ } if (settings.get('Accounts_RegistrationForm') === 'Secret URL' && (!formData.secretURL || formData.secretURL !== settings.get('Accounts_RegistrationForm_SecretURL'))) { - if (formData.secretURL) { - try { - validateInviteToken(formData.secretURL); - } catch (e) { - throw new Meteor.Error('error-user-registration-secret', 'User registration is only allowed via Secret URL', { method: 'registerUser' }); - } + if (!formData.secretURL) { + throw new Meteor.Error('error-user-registration-secret', 'User registration is only allowed via Secret URL', { method: 'registerUser' }); + } + + try { + validateInviteToken(formData.secretURL); + } catch (e) { + throw new Meteor.Error('error-user-registration-secret', 'User registration is only allowed via Secret URL', { method: 'registerUser' }); } }