invitation emails

docs/TODO.md

@@ -10,12 +10,12 @@
   - [ ] Password reset flow
   - [ ] Rate limiting on login attempts
   - [ ] Session management (remember me, session timeout)
-- [ ] **Invitation system**
+- [x] **Invitation system**
   - [x] Invitations controller (create, list, cancel)
   - [x] Invitation token generation
-  - [ ] Registration via invitation link (acceptance flow)
-  - [ ] Token expiry validation (14 days)
-  - [ ] Invitation mailer
+  - [x] Registration via invitation link (acceptance flow)
+  - [x] Token expiry validation (14 days)
+  - [x] Invitation mailer
 - [ ] **Authorization & roles**
   - [x] Role-based access control middleware (Admin::BaseController)
   - [x] Admin permissions enforcement
@@ -60,7 +60,7 @@
 
 - [x] **Setup** adds the first user
 - [x] **Admin dashboard**
-  - [x] Send invitations interface (email delivery pending mailer implementation)
+  - [x] Send invitations interface (with email delivery)
   - [x] Manage users (list, edit roles, delete)
   - [x] System statistics (users, entries, contributions)
 - [ ] **User profile page**
@@ -126,6 +126,11 @@
 
 ## Completed
 
+- [x] **Invitation system** (complete flow with email, acceptance, and expiry validation)
+- [x] **Invitation acceptance flow** (users can accept invitations and set passwords)
+- [x] **Invitation mailer** (HTML and text email templates with styled design)
+- [x] **Token expiry validation** (14-day expiration for invitation links)
+- [x] **Controller tests** (40 tests with 160+ assertions for authentication)
 - [x] **Authentication system** (login/logout with session management)
 - [x] **Admin layout design** updated to match entries page style
 - [x] **Dynamic navigation** (Admin button for logged-in admins, Sign In for guests)