Marc-André Bombeck c1eb618dcc Add invite universal-link landing for app deep-link ...

Encode the admin invite QR as a clean /invite/<hlv_token> universal-link
that the iOS app intercepts via the AASA wildcard matcher. Add the
matching web route as a thin, shape-validated redirect onto the existing
register flow, and open the path on the public allowlist so an
unauthenticated scanner reaches it. A malformed token segment is
indistinguishable from no invite — no database hit, no enumeration
oracle. The token is never logged.

2026-06-14 19:32:19 +02:00

543 KiB

Raw Blame History