@absolutejs/auth 0.86.0 → 0.86.1

package/CHANGELOG.md

@@ -6,6 +6,12 @@ This file is generated by `absolute-changelog` from the entries in
 `changelog/`. Edit an entry, not this file — and add new ones under
 `changelog/unreleased/`.
 
+## 0.86.1 — 2026-09-23
+
+### Fixed
+
+- **Allow authorized nonmember organization managers to list memberships. Revoke invitations when their delivery hook fails and return a sanitized retryable error.** (`organizationRoutes`, `createAuthApplications`)
+
 ## 0.86.0 — 2026-09-23
 
 ### Breaking

package/changelog.json

@@ -2,6 +2,20 @@
 	"contract": 1,
 	"name": "@absolutejs/auth",
 	"releases": [
+		{
+			"changes": [
+				{
+					"kind": "fixed",
+					"summary": "Allow authorized nonmember organization managers to list memberships. Revoke invitations when their delivery hook fails and return a sanitized retryable error.",
+					"symbols": [
+						"organizationRoutes",
+						"createAuthApplications"
+					]
+				}
+			],
+			"date": "2026-09-23",
+			"version": "0.86.1"
+		},
 		{
 			"changes": [
 				{

package/dist/index.d.ts

@@ -3045,6 +3045,7 @@ export declare const createAuthApplications: <UserType>(configuration: AuthConfi
                                 property?: string;
                                 expected?: string;
                             };
+                            502: "Invitation delivery failed; create a new invitation to retry";
                         };
                         error: never;
                     };

package/dist/index.js

@@ -10431,13 +10431,21 @@ var organizationRoutes = ({
       organizationStore,
       roles: roles ?? []
     });
-    await onSendInvitation?.({
-      email: invitation.email,
-      expiresAt: invitation.expiresAt,
-      inviterUserId: invitation.inviterUserId,
-      organizationId,
-      token
-    });
+    try {
+      await onSendInvitation?.({
+        email: invitation.email,
+        expiresAt: invitation.expiresAt,
+        inviterUserId: invitation.inviterUserId,
+        organizationId,
+        token
+      });
+    } catch {
+      await organizationStore.saveInvitation({
+        ...invitation,
+        state: "revoked"
+      });
+      return status("Bad Gateway", "Invitation delivery failed; create a new invitation to retry");
+    }
     await emit?.({
       at: Date.now(),
       metadata: { email: invitation.email },
@@ -10545,7 +10553,7 @@ var organizationRoutes = ({
       return status("Unauthorized", "Authentication required");
     }
     const membership = await organizationStore.getMembership(organizationId, getUserId(user));
-    if (membership?.status !== "active") {
+    if (membership?.status !== "active" && !await mayManage(user, organizationId)) {
       return status("Forbidden", "Not a member");
     }
     const members = await organizationStore.listMembershipsByOrganization(organizationId);
@@ -41608,5 +41616,5 @@ export {
   writeWarrant
 };
 
-//# debugId=466F05C3ADFAC39864756E2164756E21
+//# debugId=DC508F314D7A052E64756E2164756E21
 //# sourceMappingURL=index.js.map