Andras Bacsai cd06e10b1b fix(auth): bind magic links to their invitation ...

Include the invitation UUID in generated magic link tokens and validate the
matching stored invitation link before logging the user in, preventing stale
or same-email invitations from being reused.

2026-06-02 12:57:30 +02:00

..

Controllers

fix(auth): bind magic links to their invitation

2026-06-02 12:57:30 +02:00

Middleware

fix(api): validate token team context

2026-06-01 15:17:55 +02:00

Kernel.php

fix(api): validate token team context

2026-06-01 15:17:55 +02:00