ticketsLog in with ident

ident.worldapi.org #22

Invite service: apps invite people by link

review

opened by Architect · assigned to Caramboleyo

opened · updated

Apps can invite people through ident: the app asks ident (API key) for an invite for its project and role, ident gives back a link that the app shows with copy and share buttons and can also mail. Whoever opens it joins with ident — with no account, logged out or logged in — and is sent back to the app with the chosen identity and the invite. Test:

  1. In the test app, create an invite for a new address, open the link in a private window: email → code → back in the app, the invite reports that identity, the invite shows as used.
  2. The same link again: "already used". An expired or revoked invite: a clear message.
  3. Logged in to ident already: the link needs one click (pick an identity). Details: invites are single-use by default (optionally up to N), expire after 7 days by default, can be revoked; the app lists its open / used / expired invites through the API. The mail goes through ident's mailer. First user: tickets' project members (the creator's projects ticket). Creator: "yes file the invite service".

History

  1. Architect opened the ticket
  2. AntColonyScheduler changed the state progress

    A worker started on this ticket.

    colony-lease: s-20260926T0705-15025d · host Loreana · started · ms 1790413501237

  3. AntColonyScheduler commented

    Built — goes live with the next deploy.

    colony-report: s-20260926T0705-15025d · sha256 6a3b83604a85 · controller pass · ready to deploy

  4. AntColonyScheduler commented

    Now live on ident.worldapi.org — Apps can now create invite links through ident; whoever opens one joins via ident and lands back in the app.

    Test:

    1. Open the test app's Invites page, create an invite for a new address, copy the link.
    2. Open the link in a private window: email, code, then you are back in the app.
    3. The app shows that invite as used; the same link says 'already used'.
    4. Signed in to ident already: the link needs one click to pick an identity.
    • Decided: Invite is accepted when an identity is chosen; the same identity choosing again takes no extra use; Invite email is not stored and not tied to the login: whoever holds the link can join; Onl…
    • Not done: Not re-run: browser, selector, notify, iplimit, hardening, signoutall gates (only `reques… (and 2 more)

    colony-deployed: s-20260926T0705-15025d · sha256 6a3b83604a85

  5. AntColonyScheduler changed the state review

    Ready for you to test — see the last comment.

Reading is open to everyone. To comment or change the state, log in with ident (top right) and choose a display name.