Add multi-use group invite links with expiry and auto-approval on email confirmation

A studio admin can generate a shareable group invite link (e.g. for a newsletter) from the Invites page, choosing a required expiry date. Anyone with the link may register while it is valid, in any registration mode: the form collects their own email, they must confirm it via the usual hashed token, and confirming approves the account immediately — group signups never enter the Pending Students queue. - us_invites grows kind (personal/group) and expires_at; an explicit expiry wins over the personal 14-day window. Group links stay pending (multi-use) until revoked or expired. - RegistrationPage: group signups create the account pending with the us_auto_approve marker and send the confirmation email; no auto-login. - EmailConfirmationHandler: auto-approve accounts are approved on confirmation, emailed the approved notice, and redirected to a new us_confirmed=ready notice with a sign-in link. Closes #77 Co-Authored-By: Claude Fable 5 <[email protected]>
2026-07-22 10:44:16 -03:00
parent 681fc5ae07
commit 356d9f984d
15 changed files with 437 additions and 29 deletions
@@ -186,11 +186,13 @@ class Schema {
                email            VARCHAR(191)    NOT NULL,
                token            VARCHAR(64)     NOT NULL,
                role             VARCHAR(32)     NOT NULL DEFAULT 'us_student',
+                kind             VARCHAR(10)     NOT NULL DEFAULT 'personal',
                status           VARCHAR(20)     NOT NULL DEFAULT 'pending',
                invited_by       BIGINT UNSIGNED DEFAULT NULL,
                accepted_user_id BIGINT UNSIGNED DEFAULT NULL,
                created_at       DATETIME        NOT NULL,
                accepted_at      DATETIME        DEFAULT NULL,
+                expires_at       DATETIME        DEFAULT NULL,
                PRIMARY KEY (id),
                UNIQUE KEY token (token),
                KEY email (email),