convex-invite
Secure, single-use invitation lifecycles for Convex applications.
convex-invite is a reusable Convex component for issuing, accepting, declining,
revoking, expiring, and resending invitations. It owns the token and lifecycle
invariants while your application keeps authority over users and access.
Host-owned security boundary
Authentication, authorization, audience verification, message delivery, and membership or domain grants remain in host code. Never expose the component functions directly to clients.
What it provides
- 256-bit bearer tokens with only versioned SHA-256 digests persisted
- Single-use, audience-bound acceptance and decline
- Race-safe issue, expiry, revoke, and resend transitions
- Idempotent acceptance results for atomic host grants
- Scope-safe management, export, delivery summaries, and bounded cleanup
Start here
Install the component
Mount convex-invite and create an authenticated host client.
Study the complete example
Follow issuance through delivery, preview, acceptance, and membership creation.
Choose email delivery
Use the generic webhook or integrate the official Convex Resend component.
Review the security model
Understand token handling, audience binding, and transactional grants.