add invitation logic and ui

README.md

@@ -117,15 +117,15 @@ TODO better version where the token is also never exposed to the network so not
 
 ## Todos
 
+- use expo-secure-store for the sessionKey
+- encrypt MMKV storage on iOS and Android
+- todo list UI & structure
+- nav UI structure
+- logo and colors
 - deploy to production
-- invitation links should expire after 2 days
-- UI for invitations links
 
 - figure out how author keys are managed (tabs in serenity and possible change in secsync)
 - add retry for locker in case write fails (invalid clock)
-- use expo-secure-store for the sessionKey
-- encrypt MMKV storage on iOS and Android
-
 - allow to delete list (needs a tombstone and properly cleanup local stores)
 - allow to create lists locally
 

apps/app/src/components/documentInvitation.tsx

@@ -47,22 +47,41 @@ export const DocumentInvitation: React.FC<Props> = ({
     );
   };
 
+  if (documentInvitationQuery.isLoading) {
+    return null;
+  }
+  if (documentInvitationQuery.error) {
+    return <Text>Couldn't load the Invitation</Text>;
+  }
+
   return (
     <div>
-      <Text>Invitation link</Text>
       <div className="flex gap-2 pt-2">
-        <Input
-          id={id}
-          value={`${window.location.origin}/list-invitation/${documentInvitationQuery.data?.token}#key=${seed}`}
-          readOnly
-          className="w-72"
-        />
+        {documentInvitationQuery.data ? (
+          <Text>
+            You have one invitation link ({documentInvitationQuery.data.token})
+            which is {documentInvitationQuery.data.isExpired ? "" : "not "}
+            expired.
+          </Text>
+        ) : (
+          <Text>No invitation link found</Text>
+        )}
+
         <Button
           disabled={createOrRefreshDocumentInvitationMutation.isPending}
           onPress={createAndSendInvitation}
         >
-          <Text>Refresh</Text>
+          <Text>Create a new Invitation Link</Text>
         </Button>
+        {seed && (
+          <Input
+            id={id}
+            value={`${window.location.origin}/list-invitation/${documentInvitationQuery.data?.token}#key=${seed}`}
+            readOnly
+            className="w-72 h-40"
+            multiline
+          />
+        )}
       </div>
     </div>
   );

apps/server/src/db/getDocumentInvitationByToken.ts

@@ -1,17 +1,19 @@
+import { twoDaysAgo } from "../utils/twoDaysAgo.js";
 import { prisma } from "./prisma.js";
 
 type Params = {
   token: string;
   userId: string;
 };
 
-export const getDocumentInvitationByToken = async ({
-  token,
-  userId,
-}: Params) => {
+export const getDocumentInvitationByToken = async ({ token }: Params) => {
   const documentInvitation = await prisma.documentInvitation.findUnique({
     where: {
       token,
+      // not older than 2 days
+      createdAt: {
+        gte: twoDaysAgo(),
+      },
     },
   });
 

apps/server/src/trpc/appRouter.ts

@@ -35,6 +35,7 @@ import {
   publicProcedure,
   router,
 } from "../utils/trpc/trpc.js";
+import { twoDaysAgo } from "../utils/twoDaysAgo.js";
 
 export const appRouter = router({
   me: protectedProcedure.query(async (opts) => {
@@ -125,7 +126,12 @@ export const appRouter = router({
         documentId: opts.input.documentId,
         ciphertext: boxCiphertext,
       });
-      return documentInvitation ? { token: documentInvitation.token } : null;
+      return documentInvitation
+        ? {
+            token: documentInvitation.token,
+            isExpired: documentInvitation.createdAt < twoDaysAgo(),
+          }
+        : null;
     }),
 
   documentInvitation: protectedProcedure
@@ -136,7 +142,10 @@ export const appRouter = router({
         userId: opts.ctx.session.userId,
       });
       if (!documentInvitation) return null;
-      return { token: documentInvitation.token };
+      return {
+        token: documentInvitation.token,
+        isExpired: documentInvitation.createdAt < twoDaysAgo(),
+      };
     }),
 
   documentInvitationByToken: protectedProcedure

apps/server/src/utils/twoDaysAgo.ts

@@ -0,0 +1,3 @@
+export const twoDaysAgo = () => {
+  return new Date(Date.now() - 1000 * 60 * 60 * 24 * 2);
+};