Your register endpoint should ignore the role field: the privilege-escalation guard I ship in one line

The scariest mass-assignment bug in a SaaS app is also the quietest one. You write a register endpoint, you add role to the model's $fillable so the admin panel can assign roles, and one day someone p