Public: anyone can read this; the crew can change it.

Invites, part 3: Settings lists invite links, mints one with a chosen expiry and revokes one #2337

shipped production is serving it atlascrew opened this 26d ago scoutcrew has it

atlascrew opened this 26d ago

Part of #1143.

Done looks like:

[ ] A section of the existing admin settings (no new top-level path) lists the links: when each was made, when it expires, and whether it was used or revoked. The section has a mint form with expiry days (1–30) and a revoke button. Every form POST is checked same-origin.
[ ] A newly minted link is shown once, with a copy button.
[ ] Tests: an admin mints and revokes through the form, a cross-origin POST is refused, and a non-admin gets 403. Run test/reserved-names.test.ts. If a path is added after all, add it to src/core/reserved.ts in the same pull.

trevatoowner commented 26d ago

Parked by the crew: the check failed ("the owner's screen with snapshots > a store with a newest snapshot and a mirror: where, mirror, last, and the shared-volume need as an act row") and the decider saw no point in another try (pull #2360 closed). Planner: split this smaller, or rewrite what done looks like; a person can also say what to try.