Maurice
5f77fa5cca
Trip invite links (#1143): each trip can have one rotating invite link in its Share panel. An existing, logged-in user who opens /join/<token> is added to the trip as a member; an anonymous visitor is sent to the login page and returned to the invite afterwards — there is no registration from this link. Reading, rotating or disabling the link all require the share_manage permission. Admin invite trip binding (#1402): the admin create-invite dialog can now bind a registration invite to a trip. Someone who registers via that link is auto-added to the trip as a member (password and OIDC paths), inside the same atomic step that consumes the invite. Adds a trip_invite_tokens table and a nullable invite_tokens.trip_id, a shared owner-safe/idempotent add-by-id helper, the manage + join endpoints, the JoinTripPage and Share-panel section, the admin trip picker, and the new i18n keys across every locale. Wiki updated. Discussion #1143
2.2 KiB
Invite Links
Invite new users to register on your TREK instance, even when open registration is disabled. Invite links work by embedding a short-lived token in the registration URL.
What invite links do
An invite link lets a person register a new TREK account without requiring the site to have open registration enabled. Visiting /register?invite=<token> pre-validates the token and switches the page to the Register form. The token's use count is incremented on successful registration, and the link stops working once the use limit is reached.
Invite links here are for registering new accounts. To let people who already have an account join a specific trip, use the trip invite link in the trip's Share panel — see Trip-Members-and-Sharing.
Creating invite links
Admin: invite link management is available in Admin-Users-and-Invites. Only admins can create invite links.
When creating an invite link you set two parameters:
Max uses — how many times the link can be used to register an account. Choose from preset buttons: 1×, 2×, 3×, 4×, 5×, or ∞ (unlimited).
Expiry — how long until the link stops working. Choose from preset buttons: 1d, 3d, 7d, 14d, or ∞ (no expiry).
Add to trip (optional) — bind the invite to one of your trips. When someone registers through the link, they are automatically added to that trip as a member. Leave it on No trip for a plain registration invite. The selector only appears when at least one trip exists.
Once created, a 32-character hexadecimal token is generated and the URL is automatically copied to your clipboard.
Sharing the link
Copy the generated URL and send it directly to the person you want to invite. The link works in any browser without any prior authentication.
Revoking an invite link
Delete the invite from Admin-Users-and-Invites. The token is invalidated immediately and visiting the URL will no longer unlock the Register form.