Manually invalidate old invite links instead of automatically?

Currently, invite links use a collaboratorkey to auth new users into the space. When you remove a collaborator from a space (or they leave) the collaboratorkey is automatically regenerated (in .delete('/collaborator, controllers.space.updateCollaboratorKey).

The intent of this was for abuse prevention. If you kick someone else out on bad terms you don’t want them to be able to rejoin.

But IRL , this scenario doesn’t really seem to come up that often.

And the the downside of this behaviour is that old invite links seem less reliable for ppl bc they don’t work when collaborators leave.

Instead of doing this automatically, maybe it makes more sense to allow the user to manually regenerate the link. that way they explicitly know that they’re breaking old links. and in 99% of cases won’t need to worry about it

1 Like