Add the ability to increase the amount of time an invite link is valid for

[jdaviescoates]

Hi often have to re-send invite links because people don't click on them within 24 hours.

It'd be nice to have the ability to increase the amount of time an invite link is valid for to a week/ month etc.

[nebulon]

If this is often the case, maybe instead of making this configurable, some longer period than 1 day is more suitable?

[jdaviescoates]

@nebulon I think it depends on the user demographics. I have quite a few older members who are much less always online than many people are these days.

[nebulon]

@jdaviescoates so after looking into this in more detail, turns out the invite links never expire. The password reset links do, however they are valid for a week.

We will fix up the invite links to be invalidated though. Probably around some 3 days of validity as AI suggest. But otherwise would be good to know what you were referring to then?

[jdaviescoates]

I think I remember seeing 24 hours mentioned somewhere once. Perhaps it was on the password resets I just presumed the same applied to invites.

If invite links don't expire personally I'd just leave them like that, otherwise my post is just creating the problem I thought I had but didn't!

[jdaviescoates]

@nebulon the invite link emails (Cloudron 8 ) actually do say:

"Please note that the invite link will expire in 7 days."

I think previously that might've said 24 hours and that's why I thought that was the case?

Update: Nope, I don't think so. The earliest example still in my inbox is from 2022 and that say "Please note that the invite link will expire in 7 days" too.

But the password reset email do indeed say "Please note that the password reset link will expire in 24 hours. " so I guess that's where I got the idea from that it was 24 hours.

I'd suggest perhaps just making the code and emails match?

i.e.

1. keep it so invites don't expire and remove the "Please note that the invite link will expire in 7 days" note from the invite emails

2. Leave password reset at 24 hours and keep email as is.

[nebulon]

Ok for a start the wrong messaging in the invite email is gone for next release. The password reset expiration is unchanged. We will add some expiration for invite also just to avoid edge-cases here.