Add organisation invitations and one-time-code gateway enrolment

Invitations: token shown once, only its hash stored, 7-day expiry, the
accepting account's email must match. Enrolment codes: 15 minutes,
single use, hashed; POST /auth/enrol returns the farm's existing gateway
token without rotating it and is rate-limited per IP. No email is sent;
the inviter shares the link. Migration 0007, unit tests and
scripts/e2e-onboarding.sh.
This commit is contained in:
2026-10-30 08:13:00 +00:00
parent b431ee4030
commit fc8cf1d509
13 changed files with 1692 additions and 12 deletions
File diff suppressed because it is too large Load Diff