app.advance_recipient_tokens
TablaSeguridad a nivel de fila activa
Token links that let an advance recipient answer in Gateway without an account (Section 4.4.6). Only SHA-256 hashes of the token and access code are stored; both are shown once. Written only by the advance token RPCs.
Clave primaria: id
| Columna | Tipo | Admite nulos | Descripción |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org, derived from app.advance_recipients on insert; never accepted from the caller and never changed.Hace referencia a app.organizations.id |
| advance_recipient_id | uuid | No | Recipient the token answers for.Hace referencia a app.advance_recipients.id |
| recipient_email | text | No | Email the link was sent to, lower case. A person who signs in with this email, confirmed, may claim the token. |
| token_hash | bytea | No | SHA-256 of the token. Never readable by signed-in callers. |
| access_code_hash | bytea | No | SHA-256 of the token, a colon and the 6-digit access code. Never readable by signed-in callers. |
| expires_at | timestamp with time zone | No | When the link stops taking answers. |
| used_at | timestamp with time zone | Sí | First answer submitted with the link. |
| revoked_at | timestamp with time zone | Sí | When the link was revoked; issuing a new link for the recipient revokes the old one. |
| failed_attempts | smallint | No | Wrong access codes entered; the link locks at 5. |
| claimed_by | uuid | Sí | Person who claimed the link by signing in with its email.Hace referencia a app.people.id |
| claimed_at | timestamp with time zone | Sí | When it was claimed. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Sí | Person who inserted the row, or null for a platform process. Set by the database.Hace referencia a app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Sí | Person who last changed the row, or null for a platform process. Set by the database.Hace referencia a app.people.id |
| deleted_at | timestamp with time zone | Sí | Soft delete time. A row with deleted_at set is ignored by every access helper. |