app.invite_links
TableRow level security on
Shareable invitation links (Section 4.8.1): anyone signed in with the link joins with its role until it expires, runs out of uses or is revoked. Only a SHA-256 hash of the token is stored; the token is shown once.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org. A row never moves to another org.References app.organizations.id |
| role_id | uuid | No | Role a person receives on joining.References app.roles.id |
| token_hash | bytea | No | SHA-256 of the link token. |
| expires_at | timestamp with time zone | No | When the link stops working. |
| max_uses | integer | No | How many people may join with it. |
| use_count | integer | No | How many have joined with it. Set by the database. |
| revoked_at | timestamp with time zone | Yes | When it was revoked. |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |