bvandeusenandClaude Opus 5.5
2b6e12859a
The operator's ask: an invite link sent by mail, the key in the URL, and the new user choosing their own username, password and email. - user_invites (migration 0037): the key's sha256 only, the address, the role and days the admin chose, who sent it, used/revoked. - core/invites: create (revokes an older open invite to the address), renew (new key, new clock), find_pending, the four states, signup checks. - /invite/<key>, outside sign-in and throttled like login: the invitee's username, email (prefilled, theirs to change) and password; the account takes the admin's role, the key is used up in the same transaction and they are signed in. A bad key gets one plain message. - Settings › Users: Invite by email (address, role, 1/7/30 days), sent from the admin in their zone; without a mail server, or if sending fails, the link is shown once to copy. Invites not yet used are listed with Resend and Withdraw. - Audit: user.invited, user.invite_resent, user.invite_revoked, user.joined. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
15 lines
429 B
Plaintext
15 lines
429 B
Plaintext
{# An invite email's plain-text part; the same facts as invite.html. #}
|
|
{{ i.inviter }} invited you to Steward.
|
|
|
|
Open the link to make your account: you choose your username, email and
|
|
password.
|
|
|
|
You'll be {{ i.role }}.
|
|
Link works until: {{ i.expires }}{% if i.expires_utc %} ({{ i.expires_utc }}){% endif %}
|
|
|
|
Make your account: {{ i.link }}
|
|
|
|
--
|
|
The link works once. If you weren't expecting this, ignore it and nothing
|
|
happens.
|