From 998f9c69308ee88fac36cfb77dfb6d07c6fa926a Mon Sep 17 00:00:00 2001 From: Christophe Besson Date: Wed, 23 Sep 2026 17:46:48 +0200 Subject: feat(hub): invitation-link tickets bound to a verified address MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit group_invite_links holds sha256(ticket) and the invitee's address blind index; redeeming grants membership to that account only. Owner-only create/list/cancel (a node token may create, never mail), 20 outstanding per group, optional mail written by the hub itself and capped at 10 per sender per day (mail.invite_link_daily_cap). MESHBAY_DESIGN.md §3.4 now carries the whole link design. Co-Authored-By: Claude Opus 5.5 --- packaging/conf/hub.toml.example | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'packaging/conf') diff --git a/packaging/conf/hub.toml.example b/packaging/conf/hub.toml.example index 5407436..fc05591 100644 --- a/packaging/conf/hub.toml.example +++ b/packaging/conf/hub.toml.example @@ -129,3 +129,8 @@ reset_cooldown = 300 # recipient, and without the exemption a typo would lock the account out of # correcting it for two days. email_change_cooldown = 172800 # 48 hours + +# Invitation-link mails one account may have this hub send in a day. A link +# goes to an address that may have no account here, at the request of anyone +# who owns a group — so, unlike the others, this one counts the sender. +invite_link_daily_cap = 10 -- cgit v1.2.3