Share this link. It lets one person create a guardian account here:
- - `); -}); - -function joinForm(token, error) { - return ` - -Watch over someone you care about. Pick a name and a password; that is all.
- ${error ? `${error}
` : ''} - `; -} - -router.get('/join/:token', (req, res) => { - const inv = db.prepare('SELECT * FROM ap_guardian_invites WHERE token = ? AND used_at IS NULL') - .get(req.params.token); - if (!inv) return res.status(404).send('This invite is no longer valid.'); - res.send(joinForm(req.params.token)); -}); - -router.post('/join/:token', express.urlencoded({ extended: false }), (req, res) => { - const inv = db.prepare('SELECT * FROM ap_guardian_invites WHERE token = ? AND used_at IS NULL') - .get(req.params.token); - if (!inv) return res.status(404).send('This invite is no longer valid.'); - const name = String(req.body.name || '').trim().toLowerCase(); - const password = String(req.body.password || ''); - if (!/^[a-z0-9_-]{1,32}$/.test(name)) return res.status(400).send(joinForm(req.params.token, 'Only lowercase letters, digits, - and _.')); - if (password.length < 8) return res.status(400).send(joinForm(req.params.token, 'Password: at least 8 characters.')); - if (db.prepare('SELECT 1 FROM sites WHERE slug = ?').get(name) || db.prepare('SELECT 1 FROM users WHERE username = ?').get(name)) { - return res.status(409).send(joinForm(req.params.token, 'That name is taken, pick another.')); - } - const userId = crypto.randomUUID(); - db.prepare('INSERT INTO users (id, username, email, password_hash, role) VALUES (?,?,?,?,?)') - .run(userId, name, `${name}@guardian.invalid`, bcrypt.hashSync(password, 10), 'member'); - db.prepare('INSERT INTO sites (id, slug, title, owner_id, is_primary, guardian_only) VALUES (?,?,?,?,0,1)') - .run(crypto.randomUUID(), name, name, userId); - db.prepare('UPDATE ap_guardian_invites SET used_by = ?, used_at = CURRENT_TIMESTAMP WHERE token = ?') - .run(userId, req.params.token); - req.session.user = { id: userId, username: name, role: 'member' }; - res.redirect('/guardian'); -}); +// Losse guardian-accounts (guardian-lite: /invite + /join, user + site met +// guardian_only=1) zijn verwijderd op 31-7-2026. Een instance is een eigenaar; +// zo'n account was de laatste multi-user-rest en zette bovendien andermans +// wachtwoordhash, sessie en PRIVATE actor-sleutel in jouw database, wat een +// verhuizing (shaer-qw6q) onmogelijk netjes maakte. Een guardian hoort een +// eigen Klonkt te hebben; de adoptie loopt dan gewoon over de federatie. export default router;