Invitations: Data, permissions, and operations

Stores hashed invite tokens with expiry, checks seat limits at accept time, invalidates unused invites on revoke, and binds the granted role at accept rather than encoding it in the URL.

Как написать блок

Опубликовано Sep 12, 2026