Prevent user creation from client

[cecilcosta]

After installing accounts-password I discovered that Accounts.createUser can be called from the browser console. This feature is a spammer call. How can I prevent it of being called from the client side?

[vooteles]

You can set forbidClientAccountCreation in global accounts config. More info here:

Accounts (multi-server) | Meteor API Docs

[mahadoang]

//Server
Meteor.startup(function() {
   Accounts.config({
        forbidClientAccountCreation: true
    });
});