feat(invites): add use-limited invite links (#3141)

## Summary

- add database-backed v2 invite links with optional maximum-use limits
and atomic final-slot redemption
- preserve v1 invite compatibility while adding
exhausted/expired/invalid client handling across desktop, web, and
mobile
- emit structured claim-outcome logs with community, invite ID, outcome,
maximum uses, and post-claim count

## Verification

- `cargo fmt --all -- --check`
- `cargo test -p buzz-db` (85 passed, 134 Postgres-dependent ignored)
- `cargo clippy -p buzz-db --all-targets -- -D warnings`
- desktop `npm run typecheck`
- push hook: desktop checks/tests, desktop Tauri tests, Rust tests, and
branch-skew passed
- Postgres integration tests were previously reviewed green at the
pre-rebase tree; local rerun on this session was unavailable because
Postgres/Docker were not running
- mobile push-hook check could not start because Flutter is unavailable
locally

---------

Signed-off-by: Kalvin Chau <kalvin@block.xyz>
Signed-off-by: npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7 <6e30cd56c30e030cd31bb0939b94a7c257c9a09d5ba2d92cf2735da45629f248@buzz.block.builderlab.xyz>
Co-authored-by: npub1c4alndp82zyt9veaklm5d965quss79vlhk9awv7qu5erwhmf42qqlvc25c <c57bf9b4275088b2b33db7f746975407210f159fbd8bd733c0e532375f69aa80@buzz.block.builderlab.xyz>
Co-authored-by: npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc <5288f082d91aff2de5bc8be23fbfa01ca2e3859cac57a91b7a3fa9f12349505c@buzz.block.builderlab.xyz>
Co-authored-by: npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7 <6e30cd56c30e030cd31bb0939b94a7c257c9a09d5ba2d92cf2735da45629f248@buzz.block.builderlab.xyz>
This commit is contained in:
Kalvin C
2026-07-27 15:19:39 -07:00
committed by GitHub
parent 98a7b13348
commit d500c2d5cf
24 changed files with 1732 additions and 35 deletions

View File

@@ -25,6 +25,8 @@ export type MintedInvite = {
code: string;
expiresAt: number;
url: string;
maxUses: number | null;
usesRemaining: number | null;
};
export type JoinPolicy = {
@@ -189,15 +191,29 @@ export async function acceptJoinPolicy(
}
/** Mint an invite code on the active community's relay (owner/admin only). */
export async function mintInvite(ttlSecs?: number): Promise<MintedInvite> {
export async function mintInvite(options?: {
ttlSecs?: number;
maxUses?: number | null;
}): Promise<MintedInvite> {
const base = await getRelayHttpUrl();
const body = JSON.stringify(ttlSecs ? { ttl_secs: ttlSecs } : {});
const payload: Record<string, unknown> = {};
if (options?.ttlSecs != null) payload.ttl_secs = options.ttlSecs;
if (options?.maxUses != null) payload.max_uses = options.maxUses;
const body = JSON.stringify(payload);
const raw = await invitePost<{
code: string;
expires_at: number;
url: string;
max_uses: number | null;
uses_remaining: number | null;
}>(base, "/api/invites", body);
return { code: raw.code, expiresAt: raw.expires_at, url: raw.url };
return {
code: raw.code,
expiresAt: raw.expires_at,
url: raw.url,
maxUses: raw.max_uses,
usesRemaining: raw.uses_remaining,
};
}
/**