Sending invite link to FB messenger automatically logins

Action : Create invite via profile page, choose create link, copy link, paste into facebook messenger conversation.
Expected behavior : After the link is clicked and some confirmation is given by the invitee, an account is created and a notification is sent to the inviter saying the invite was accepted.
Actual behavior: As soon as the message appears as sent (not seen), a notification appears on discourse saying the corresponding user accepted the invite.

Not sure if bug, but it is certainly weird.

Discourse version: v1.8.0.beta1 +3

Some automated / scanning process is visiting the link when you post it there.

@techapj we should make sure javascript checks are in place for invites, so a command line curl retrieval command doesn’t trigger them at least.

2 Likes

Okay, added a confirmation button to accept invite:

https://github.com/discourse/discourse/commit/9dd09e453beaedefb01fe6c98ff524b7a4b074a9

9 Likes

I tested it too, it works!

2 Likes