feat(identity): add verified invitations with automatic email

feat(identity): add verified invitations with automatic emailHodeTech/LearnStack #41 · 5 diagrams

100%

01 / 07Admin creates role-pinned invitationAdmins issue an invitation. The API writes an offer and stages an encrypted delivery job in one atomic database commit.+91 −0 handles the request and calls CreateInvitationCommand in +190 −0.
02 / 07Worker delivers email from encrypted custodyA background worker claims the envelope, decrypts the payload in memory, and submits it to SMTP without transport retries. claims the envelope in and dispatches via SmtpEmailProvider.
03 / 07Invitee lands on native handlerThe browser hits the native HTTP entry route, staging verifier cookies and reading offer details via the SDK. receives the request and calls inspectInvitation on .
04 / 07UserInfo email claim verified liveThe API queries Keycloak directly to ensure the authenticated user holds the exact verified email on the invitation.+169 −0 queries UserInfo on using the bearer credential.
05 / 07Acceptance grants active membershipAcceptance marks the invitation consumed and creates the membership in one database transaction.+217 −0 writes the consumed offer and new membership into .
06 / 07Invitations and custody tables addedPostgres schema gains invitations, encrypted email envelopes, and attempt receipts with strict RLS policies.+131 −0 creates and InvitationSmtpStorageDdl.cs adds custody tables.
07 / 07Everything this change touchedThe complete end-to-end invitation journey, from admin management and encrypted SMTP to acceptance and membership grant.

esc to leave

StarHelp other teams find it