mirror of
https://github.com/element-hq/matrix-authentication-service.git
synced 2026-10-23 00:03:24 +00:00
The registration page takes its post-auth action from the query if it has one, and otherwise opens the room of the registration token it was given. That covers a browser already signed in, which goes straight to the room; the page's Sign in link and provider buttons; and the registration itself, which stores the action so that every later step follows it, including the email-in-use page's Start over. The token is looked up whatever its validity, before the signed-in redirect: a used token still names its room, which is how an invite link opened again after registering, or a second invite for the same address, reaches its room. Only registering needs a valid token. The page of an invalid invite doesn't submit its token, so a submission without one takes it from the page's URL. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RkxQWj8RAKd7iZ1JQtXdxm