Merge pull request #6124 from frosato-dev/master

Prevent user registration with confirmed status

packages/strapi-plugin-users-permissions/controllers/Auth.js

@@ -390,7 +390,7 @@ module.exports = {
     }
 
     const params = {
-      ..._.pick(ctx.request.body, ['username', 'email', 'password']),
+      ..._.omit(ctx.request.body, ['confirmed', 'resetPasswordToken']),
       provider: 'local',
     };