mirror of
https://github.com/element-hq/matrix-authentication-service.git
synced 2026-10-15 19:51:02 +00:00
`/invite/{token}` checks that the token exists and redirects to `/register`
with it in the query string, which hands it to the form island as a read-only
field. Once the token resolves over GraphQL, the username and email address it
was issued for are filled in and locked, and the email field shows up even when
the server would otherwise not ask for one.
The token is passed back in the POST body and attached to the registration.
Nothing validates it server-side yet.