Architecture
Invitations and requests
How people are invited, how they ask for access, and how they leave an organisation or close their account.
Invitations
There is one standard invitation link for everyone, whatever brings them to CobraSphere.
- A CobraSphere administrator issues an invitation for an account.
- The person receives a link to account.cobrasphere.com/invite followed by a long token.
- The link shows a short welcome, then the normal sign-in with a one-time code, then opens the product the invitation names.
- A link works for 30 days. Issuing a new invitation stops the previous open one, so only the newest link works.
- Only a fingerprint of the token is stored, never the token itself.
| Invitation status | What it means |
|---|---|
| Sent | The invitation was issued |
| Opened | The link was opened. Only the time is recorded, no address or device |
| Joined | The person signed in through the link |
| Expired | The 30 days passed |
| Revoked | The invitation was stopped, for example by a newer one |
Asking for access
A person without an access code can ask for access. No sign-in is needed.
- The request asks for a name, an email address, the organisation's name, its website if there is one, and the reason for asking.
- Every request waits for a CobraSphere administrator. Automatic checks are shown to the administrator as signals and never decide anything.
- Approving finds or makes the person's account, with the status Invited and nothing granted, and issues the standard invitation link.
- Declining records the decision only.
- A request and the details it came with are removed after 12 months.
| Request status | What it means |
|---|---|
| Submitted | Waiting for a decision |
| Approved | Accepted, and the invitation was sent |
| Declined | Not accepted |
Leaving an organisation or closing an account
A signed-in person can ask, from the Account console, to leave an organisation or to close their CobraSphere account. Nothing happens until a CobraSphere administrator approves.
- Leave an organisation. Approving removes that one membership.
- Close the account. Approving sets the account to Inactive, ends its sessions and stops its invitation links. Nothing is deleted.
| Request status | What it means |
|---|---|
| Submitted | Waiting for a decision |
| Approved | Accepted and carried out |
| Declined | Not accepted |
| Withdrawn | The person took the request back |