The Invite Flow
The invitation process can be used to restrict onboarding to specific emails (or phone numbers) that are explicitly authorized by existing users in the application. Invitation is a restrictive process used to control access to an application. First, the application on a sender device calls the Cosync REST Service API invite function with the email handle and some invite data. Second, the Cosync JWT provider sends a six-digit code to the email handle to verify the invited user’s identity. Third, the application on the invited user device calls the Cosync REST Service API register function with the new user’s handle, password, and code to complete the invitation process.