alexei.dolgolyov
38335e925b
Replaces the blunt registrationEnabled toggle with per-invite access. Invites are tokenized, single-use, optionally locked to an email, can grant user or admin role, and expire (default 7d, max 90d). - Invite model with tokenHash (bcrypt), email, role, expiresAt, usedAt/usedByUserId. - inviteService: create, list, revoke, findInviteByToken, consumeInvite. Token is shown exactly once at creation. - /admin/invites page: list with status (Active/Used/Expired), generate with email lock + role + custom expiry, copy one-shot URL, revoke. - /register?invite=TOKEN: accepts invite even when registrationEnabled is false; shows a banner; enforces email lock; applies the invite's role on creation; consumes the invite on success. - Linked from the admin navbar.
22 lines
580 B
SQL
22 lines
580 B
SQL
-- CreateTable
|
|
CREATE TABLE "Invite" (
|
|
"id" TEXT NOT NULL PRIMARY KEY,
|
|
"tokenHash" TEXT NOT NULL,
|
|
"email" TEXT,
|
|
"role" TEXT NOT NULL DEFAULT 'user',
|
|
"expiresAt" DATETIME NOT NULL,
|
|
"usedAt" DATETIME,
|
|
"usedByUserId" TEXT,
|
|
"createdById" TEXT,
|
|
"createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
|
|
);
|
|
|
|
-- CreateIndex
|
|
CREATE UNIQUE INDEX "Invite_tokenHash_key" ON "Invite"("tokenHash");
|
|
|
|
-- CreateIndex
|
|
CREATE INDEX "Invite_tokenHash_idx" ON "Invite"("tokenHash");
|
|
|
|
-- CreateIndex
|
|
CREATE INDEX "Invite_createdById_idx" ON "Invite"("createdById");
|