flaskbb-plugin-inviteonly 1.0.0__tar.gz

flaskbb_plugin_inviteonly-1.0.0/.gitignore

@@ -0,0 +1,44 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+*.egg-info/
+.installed.cfg
+*.egg
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.coverage
+.coverage.*
+.cache
+.pytest_cache/
+.ruff_cache/
+nosetests.xml
+coverage.xml
+*,cover
+.hypothesis/
+
+# Translations
+*.mo
+*.pot
+
+*.log
+
+.vscode
+.venv/
+.mypy_cache/

flaskbb_plugin_inviteonly-1.0.0/LICENSE

@@ -0,0 +1,31 @@
+Copyright (c) 2026 by Peter Justin and contributors. See AUTHORS for more
+details.
+
+Some rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+* Redistributions of source code must retain the above copyright
+  notice, this list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright
+  notice, this list of conditions and the following disclaimer in the
+  documentation and/or other materials provided with the distribution.
+
+* The names of the contributors may not be used to endorse or
+  promote products derived from this software without specific
+  prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

flaskbb_plugin_inviteonly-1.0.0/PKG-INFO

@@ -0,0 +1,91 @@
+Metadata-Version: 2.5
+Name: flaskbb-plugin-inviteonly
+Version: 1.0.0
+Summary: Invite-only registration for FlaskBB - let admins and quota-holding members invite new users even while registration is closed
+Project-URL: Homepage, https://github.com/flaskbb/flaskbb-plugin-inviteonly
+Project-URL: Repository, https://github.com/flaskbb/flaskbb-plugin-inviteonly
+Project-URL: Issues, https://github.com/flaskbb/flaskbb-plugin-inviteonly/issues
+Project-URL: Changelog, https://github.com/flaskbb/flaskbb-plugin-inviteonly/blob/master/CHANGELOG.md
+Author-email: Peter Justin <peter@peterjustin.com>
+Maintainer-email: Peter Justin <peter@peterjustin.com>
+License-Expression: BSD-3-Clause
+License-File: LICENSE
+Keywords: flaskbb,invitation,invite,plugin,registration
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Web Environment
+Classifier: Framework :: Flask
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: End Users/Desktop
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Internet :: WWW/HTTP :: Dynamic Content
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Requires-Python: >=3.12
+Requires-Dist: flaskbb>=3.0.0
+Description-Content-Type: text/markdown
+
+Invite-only
+===========
+
+Invite-only registration for FlaskBB. Lets an admin, or a member with an
+invitation quota, generate an invitation code/link (optionally emailed)
+that lets someone register even while registration is otherwise closed.
+
+
+Installation
+------------
+
+Install *flaskbb-plugin-inviteonly* with
+``pip install flaskbb-plugin-inviteonly``
+
+For local development against a FlaskBB checkout, see "Developing a new,
+standalone plugin" in FlaskBB's own
+[plugin development docs](https://flaskbb.readthedocs.io/en/latest/development/plugin/developing.html) -
+in short, from FlaskBB's root folder:
+
+```
+uv pip install -e ../flaskbb-plugin-inviteonly
+```
+
+
+Usage
+-----
+
+Any logged-in member with a nonzero (or unlimited) invitation quota can
+create invitations from "My Invitations" (linked in the user menu). Each
+invitation is a one-time code/link; an email address can optionally be
+given to send it directly, otherwise the code/link is shown to copy and
+share manually.
+
+The recipient registers either by following the link
+(`/invite/<code>`) or by entering the code on the "Have an invitation
+code?" page (`/invite`) - both work even while FlaskBB's own
+registration is closed (`REGISTRATION_ENABLED` off).
+
+Admins manage every invitation and grant/adjust any user's quota from
+the admin panel's "Invitations" page.
+
+
+Settings
+--------
+
+*Invite-only Settings*, under the admin panel's Plugin Settings, has
+three options:
+
+* **Enable invite-only registration** - master toggle for the invitation
+  routes (default: on).
+* **Default invitation quota** - how many invitations a user can create
+  before an admin has granted them a quota (default: 0, meaning
+  invitations are admin-only until granted).
+* **Invitation expiry (days)** - how long an invitation stays valid
+  (default: 7, 0 means it never expires).
+
+Admins always bypass the quota check and can create invitations
+regardless of their own quota.
+
+
+License
+-------
+This project is licensed under the terms of the [BSD License](/LICENSE).

flaskbb_plugin_inviteonly-1.0.0/README.md

@@ -0,0 +1,63 @@
+Invite-only
+===========
+
+Invite-only registration for FlaskBB. Lets an admin, or a member with an
+invitation quota, generate an invitation code/link (optionally emailed)
+that lets someone register even while registration is otherwise closed.
+
+
+Installation
+------------
+
+Install *flaskbb-plugin-inviteonly* with
+``pip install flaskbb-plugin-inviteonly``
+
+For local development against a FlaskBB checkout, see "Developing a new,
+standalone plugin" in FlaskBB's own
+[plugin development docs](https://flaskbb.readthedocs.io/en/latest/development/plugin/developing.html) -
+in short, from FlaskBB's root folder:
+
+```
+uv pip install -e ../flaskbb-plugin-inviteonly
+```
+
+
+Usage
+-----
+
+Any logged-in member with a nonzero (or unlimited) invitation quota can
+create invitations from "My Invitations" (linked in the user menu). Each
+invitation is a one-time code/link; an email address can optionally be
+given to send it directly, otherwise the code/link is shown to copy and
+share manually.
+
+The recipient registers either by following the link
+(`/invite/<code>`) or by entering the code on the "Have an invitation
+code?" page (`/invite`) - both work even while FlaskBB's own
+registration is closed (`REGISTRATION_ENABLED` off).
+
+Admins manage every invitation and grant/adjust any user's quota from
+the admin panel's "Invitations" page.
+
+
+Settings
+--------
+
+*Invite-only Settings*, under the admin panel's Plugin Settings, has
+three options:
+
+* **Enable invite-only registration** - master toggle for the invitation
+  routes (default: on).
+* **Default invitation quota** - how many invitations a user can create
+  before an admin has granted them a quota (default: 0, meaning
+  invitations are admin-only until granted).
+* **Invitation expiry (days)** - how long an invitation stays valid
+  (default: 7, 0 means it never expires).
+
+Admins always bypass the quota check and can create invitations
+regardless of their own quota.
+
+
+License
+-------
+This project is licensed under the terms of the [BSD License](/LICENSE).

flaskbb_plugin_inviteonly-1.0.0/inviteonly/__init__.py

@@ -0,0 +1,118 @@
+"""
+inviteonly
+~~~~~~~~~~
+
+An invite-only registration plugin for FlaskBB. Lets an admin or a user
+with an invitation quota generate a code/link (optionally emailed) that
+lets someone register even while registration is globally closed.
+
+:copyright: (c) 2026 by Peter Justin.
+:license: BSD License, see LICENSE for more details.
+"""
+
+import os
+
+from flask import Flask
+from flask_allows2 import Permission
+from flask_login import current_user
+from flaskbb.settings import BoolSetting, IntSetting, SettingGroup
+from flaskbb.user.models import User
+from flaskbb.utils.helpers import real, render_template
+from flaskbb.utils.requirements import IsAdmin
+from pluggy import HookimplMarker
+
+from .utils import (
+    DEFAULT_ENABLED,
+    DEFAULT_EXPIRY_DAYS,
+    DEFAULT_QUOTA,
+    default_quota,
+    display_remaining,
+    grant_quota,
+)
+from .views import inviteonly_bp
+
+__version__ = "1.0.0"
+
+hookimpl = HookimplMarker("flaskbb")
+
+
+@hookimpl
+def flaskbb_load_migrations():
+    return os.path.join(os.path.dirname(__file__), "migrations")
+
+
+@hookimpl
+def flaskbb_load_translations():
+    return os.path.join(os.path.dirname(__file__), "translations")
+
+
+@hookimpl
+def flaskbb_load_blueprints(app: Flask):
+    app.register_blueprint(
+        inviteonly_bp,
+        url_prefix=app.config.get("PLUGIN_INVITEONLY_URL_PREFIX", "/invite"),
+    )
+
+
+SETTINGS = SettingGroup(
+    key="inviteonly",
+    name="Invite-only Settings",
+    description="Settings for invite-only registration.",
+    settings=(
+        BoolSetting(
+            key="ENABLED",
+            value=DEFAULT_ENABLED,
+            name="Enable invite-only registration",
+            description=(
+                "When enabled, invitation links/codes let someone register "
+                "even while registration is otherwise closed."
+            ),
+        ),
+        IntSetting(
+            key="DEFAULT_QUOTA",
+            value=DEFAULT_QUOTA,
+            min=0,
+            name="Default invitation quota",
+            description=(
+                "How many invitations a user can create before an admin has "
+                "granted them a quota. 0 means invitations are admin-only "
+                "until a quota is granted."
+            ),
+        ),
+        IntSetting(
+            key="EXPIRY_DAYS",
+            value=DEFAULT_EXPIRY_DAYS,
+            min=0,
+            name="Invitation expiry (days)",
+            description=("How many days an invitation stays valid. 0 means it never expires."),
+        ),
+    ),
+)
+
+
+@hookimpl
+def flaskbb_load_setting_groups():
+    return SETTINGS
+
+
+@hookimpl
+def flaskbb_registration_post_processor(user: User):
+    # Seeds a quota row for every newly registered user (open or
+    # invite-based - both paths call RegistrationService.register(), which
+    # fires this hook) so the default quota setting takes effect immediately
+    # instead of only lazily on first invite creation.
+    grant_quota(user, default_quota())
+
+
+@hookimpl
+def flaskbb_tpl_user_nav_loggedin_before():
+    user = real(current_user)
+    remaining = display_remaining(user, default_quota())
+    has_invites = remaining is None or remaining > 0
+    return render_template("inviteonly/_navlink.html", remaining=remaining, has_invites=has_invites)
+
+
+@hookimpl(trylast=True)
+def flaskbb_tpl_admin_settings_menu(user: User):
+    if Permission(IsAdmin, identity=user):
+        return [("inviteonly.admin_invitations", "Invitations", "fa fa-envelope-open-text")]

flaskbb_plugin_inviteonly-1.0.0/inviteonly/forms.py

@@ -0,0 +1,54 @@
+"""
+inviteonly.forms
+~~~~~~~~~~~~~~~~
+
+Forms used to enter an invite code, create an invite, revoke an invite,
+and (for admins) set a user's invitation quota.
+
+:copyright: (c) 2026 by Peter Justin.
+:license: BSD License, see LICENSE for more details.
+"""
+
+from flask_babelplus import gettext as _
+from flask_wtf import FlaskForm
+from flaskbb.utils.forms import FlaskBBForm
+from wtforms import BooleanField, IntegerField, StringField, SubmitField
+from wtforms.validators import DataRequired, Length, NumberRange, Optional
+
+
+class InviteCodeForm(FlaskBBForm):
+    code = StringField(
+        _("Invitation code"),
+        validators=[DataRequired(message=_("Please enter an invitation code."))],
+    )
+    submit = SubmitField(_("Continue"))
+
+
+class CreateInviteForm(FlaskBBForm):
+    email = StringField(
+        _("Email address (optional)"),
+        validators=[Optional(), Length(max=255)],
+    )
+    submit = SubmitField(_("Create invitation"))
+
+
+class AdminQuotaForm(FlaskBBForm):
+    remaining = IntegerField(
+        _("Remaining invitations"),
+        validators=[Optional(), NumberRange(min=0)],
+    )
+    unlimited = BooleanField(_("Unlimited"), default=False)
+    submit = SubmitField(_("Save"))
+
+
+class AdminGrantQuotaForm(AdminQuotaForm):
+    username = StringField(
+        _("Username"),
+        validators=[DataRequired(message=_("Please enter a username."))],
+    )
+
+
+class RevokeInviteForm(FlaskForm):
+    """Carries the CSRF token for a revoke request - the invitation id
+    comes from the URL, so there's nothing else for this form to hold.
+    """

flaskbb_plugin_inviteonly-1.0.0/inviteonly/migrations/202607301400_c3e7a1f9b8d2_add_inviteonly.py

@@ -0,0 +1,84 @@
+"""Add inviteonly_invitations and inviteonly_quotas
+
+Revision ID: c3e7a1f9b8d2
+Revises:
+Create Date: 2026-07-30 14:00:00.000000
+
+"""
+
+import flaskbb
+import sqlalchemy as sa
+from alembic import op
+
+# revision identifiers, used by Alembic.
+revision = "c3e7a1f9b8d2"
+down_revision = None
+branch_labels = ("inviteonly",)
+depends_on = "8ad96e49dc6"  # flaskbb core init migration - creates users
+
+
+def upgrade():
+    con = op.get_bind()
+
+    if not sa.inspect(con).has_table("inviteonly_invitations"):
+        op.create_table(
+            "inviteonly_invitations",
+            sa.Column("id", sa.Integer(), nullable=False),
+            sa.Column("code", sa.String(length=64), nullable=False),
+            sa.Column("created_by_id", sa.Integer(), nullable=True),
+            sa.Column("invited_email", sa.String(length=255), nullable=True),
+            sa.Column(
+                "created_at",
+                flaskbb.utils.database.UTCDateTime(timezone=True),
+                nullable=False,
+            ),
+            sa.Column(
+                "expires_at",
+                flaskbb.utils.database.UTCDateTime(timezone=True),
+                nullable=True,
+            ),
+            sa.Column(
+                "accepted_at",
+                flaskbb.utils.database.UTCDateTime(timezone=True),
+                nullable=True,
+            ),
+            sa.Column("accepted_by_id", sa.Integer(), nullable=True),
+            sa.Column(
+                "revoked_at",
+                flaskbb.utils.database.UTCDateTime(timezone=True),
+                nullable=True,
+            ),
+            sa.ForeignKeyConstraint(
+                ["created_by_id"],
+                ["users.id"],
+                name=op.f("fk_inviteonly_invitations_created_by_id_users"),
+                ondelete="SET NULL",
+            ),
+            sa.ForeignKeyConstraint(
+                ["accepted_by_id"],
+                ["users.id"],
+                name=op.f("fk_inviteonly_invitations_accepted_by_id_users"),
+                ondelete="SET NULL",
+            ),
+            sa.PrimaryKeyConstraint("id", name=op.f("pk_inviteonly_invitations")),
+            sa.UniqueConstraint("code", name=op.f("uq_inviteonly_invitations_code")),
+        )
+
+    if not sa.inspect(con).has_table("inviteonly_quotas"):
+        op.create_table(
+            "inviteonly_quotas",
+            sa.Column("user_id", sa.Integer(), nullable=False),
+            sa.Column("remaining", sa.Integer(), nullable=True),
+            sa.ForeignKeyConstraint(
+                ["user_id"],
+                ["users.id"],
+                name=op.f("fk_inviteonly_quotas_user_id_users"),
+                ondelete="CASCADE",
+            ),
+            sa.PrimaryKeyConstraint("user_id", name=op.f("pk_inviteonly_quotas")),
+        )
+
+
+def downgrade():
+    op.drop_table("inviteonly_quotas")
+    op.drop_table("inviteonly_invitations")

flaskbb_plugin_inviteonly-1.0.0/inviteonly/models.py

@@ -0,0 +1,74 @@
+"""
+inviteonly.models
+~~~~~~~~~~~~~~~~~
+
+The models for invitations and per-user invitation quotas.
+
+:copyright: (c) 2026 by Peter Justin.
+:license: BSD License, see LICENSE for more details.
+"""
+
+import datetime
+
+from flaskbb.utils.database import BaseModel, UTCDateTime
+from flaskbb.utils.helpers import time_utcnow
+from sqlalchemy import ForeignKey, Integer, String
+from sqlalchemy.orm import Mapped, mapped_column, relationship
+
+
+class Invitation(BaseModel):
+    __tablename__ = "inviteonly_invitations"
+
+    id: Mapped[int] = mapped_column(Integer, primary_key=True)
+    code: Mapped[str] = mapped_column(String(64), unique=True, nullable=False)
+    created_by_id: Mapped[int | None] = mapped_column(
+        ForeignKey("users.id", ondelete="SET NULL"), nullable=True
+    )
+    invited_email: Mapped[str | None] = mapped_column(String(255), nullable=True)
+    created_at: Mapped[datetime.datetime] = mapped_column(
+        UTCDateTime(timezone=True), default=time_utcnow, nullable=False
+    )
+    expires_at: Mapped[datetime.datetime | None] = mapped_column(
+        UTCDateTime(timezone=True), nullable=True
+    )
+    accepted_at: Mapped[datetime.datetime | None] = mapped_column(
+        UTCDateTime(timezone=True), nullable=True
+    )
+    accepted_by_id: Mapped[int | None] = mapped_column(
+        ForeignKey("users.id", ondelete="SET NULL"), nullable=True
+    )
+    revoked_at: Mapped[datetime.datetime | None] = mapped_column(
+        UTCDateTime(timezone=True), nullable=True
+    )
+
+    created_by = relationship("User", foreign_keys=[created_by_id])
+    accepted_by = relationship("User", foreign_keys=[accepted_by_id])
+
+    @property
+    def is_expired(self) -> bool:
+        return self.expires_at is not None and self.expires_at <= time_utcnow()
+
+    @property
+    def is_valid(self) -> bool:
+        return self.accepted_at is None and self.revoked_at is None and not self.is_expired
+
+    @property
+    def status(self) -> str:
+        if self.accepted_at is not None:
+            return "accepted"
+        if self.revoked_at is not None:
+            return "revoked"
+        if self.is_expired:
+            return "expired"
+        return "pending"
+
+
+class InviteQuota(BaseModel):
+    __tablename__ = "inviteonly_quotas"
+
+    user_id: Mapped[int] = mapped_column(
+        ForeignKey("users.id", ondelete="CASCADE"), primary_key=True
+    )
+    remaining: Mapped[int | None] = mapped_column(Integer, nullable=True)
+
+    user = relationship("User", foreign_keys=[user_id])

flaskbb_plugin_inviteonly-1.0.0/inviteonly/templates/inviteonly/_macros.html

@@ -0,0 +1,11 @@
+{%- macro status_badge(status) -%}
+{%- if status == "accepted" -%}
+<span class="badge bg-success">{% trans %}accepted{% endtrans %}</span>
+{%- elif status == "revoked" -%}
+<span class="badge bg-danger">{% trans %}revoked{% endtrans %}</span>
+{%- elif status == "expired" -%}
+<span class="badge bg-secondary">{% trans %}expired{% endtrans %}</span>
+{%- else -%}
+<span class="badge bg-info">{% trans %}pending{% endtrans %}</span>
+{%- endif -%}
+{%- endmacro -%}

flaskbb_plugin_inviteonly-1.0.0/inviteonly/templates/inviteonly/_navlink.html

@@ -0,0 +1,12 @@
+{%- if has_invites -%}
+<ul class="navbar-nav me-2">
+    <li class="nav-item">
+        <a class="nav-link" href="{{ url_for('inviteonly.mine') }}">
+            <span class="fas fa-envelope-open-text fa-fw"></span> {% trans %}Invitations{% endtrans %}
+            {%- if remaining is not none -%}
+            <span class="badge bg-secondary">{{ remaining }}</span>
+            {%- endif -%}
+        </a>
+    </li>
+</ul>
+{%- endif -%}

flaskbb_plugin_inviteonly-1.0.0/inviteonly/templates/inviteonly/admin.html

@@ -0,0 +1,90 @@
+{% set page_title = _("Invitations") %}
+{% set active = "inviteonly.admin_invitations" %}
+
+{% extends theme("management/management_layout.html") %}
+
+{% block breadcrumb %}
+<ol class="breadcrumb flaskbb-breadcrumb">
+    <li class="breadcrumb-item"><a href="{{ url_for('forum.index') }}">{% trans %}Forum{% endtrans %}</a></li>
+    <li class="breadcrumb-item"><a href="{{ url_for('management.overview') }}">{% trans %}Management{% endtrans %}</a></li>
+    <li class="breadcrumb-item active">{% trans %}Invitations{% endtrans %}</li>
+</ol>
+{% endblock %}
+
+{% block management_content %}
+{%- from theme('_macros/form.html') import render_field, action_confirm -%}
+{%- from theme('_macros/pagination.html') import render_pagination -%}
+{%- from theme('inviteonly/_macros.html') import status_badge -%}
+
+<div class="col-md-12 settings-col">
+    <div class="card settings">
+        <div class="card-header settings-header">
+            <span class="fa fa-envelope-open-text"></span> {% trans %}Grant a user's quota{% endtrans %}
+        </div>
+        <div class="card-body settings-body">
+            <form class="row p-2" role="form" method="POST" action="{{ url_for('inviteonly.admin_grant_quota') }}">
+                {{ grant_form.hidden_tag() }}
+                {{ render_field(grant_form.username, div_class="mb-3 col-md-6") }}
+                {{ render_field(grant_form.remaining, div_class="mb-3 col-md-6") }}
+                {{ render_field(grant_form.unlimited) }}
+                {{ render_field(grant_form.submit) }}
+            </form>
+        </div>
+    </div>
+</div>
+
+<div class="col-md-12 settings-col">
+    <div class="card settings">
+        <div class="card-header settings-header border-top">
+            <span class="fa fa-list"></span> {% trans %}All Invitations{% endtrans %}
+        </div>
+        <div class="card-body settings-body">
+            <div class="settings-content">
+                <div class="settings-meta row">
+                    <div class="col-md-2 col-sm-2 col-3 ps-3 meta-item">{% trans %}Code{% endtrans %}</div>
+                    <div class="col-md-2 col-sm-2 col-3 meta-item">{% trans %}Created by{% endtrans %}</div>
+                    <div class="col-md-3 col-sm-3 d-none d-sm-block meta-item">{% trans %}Invited email{% endtrans %}</div>
+                    <div class="col-md-2 col-sm-2 col-3 meta-item">{% trans %}Status{% endtrans %}</div>
+                    <div class="col-md-2 col-sm-2 d-none d-sm-block meta-item">{% trans %}Created{% endtrans %}</div>
+                    <div class="col-md-1 col-sm-1 col-3 meta-item">{% trans %}Actions{% endtrans %}</div>
+                </div>
+            {% for invite in invites.items %}
+                <div class="row settings-row hover">
+                    <div class="col-md-2 col-sm-2 col-3 ps-3"><code>{{ invite.code }}</code></div>
+                    <div class="col-md-2 col-sm-2 col-3">
+                        {%- if invite.created_by -%}
+                        <a href="{{ invite.created_by.url }}">{{ invite.created_by.username }}</a>
+                        {%- else -%}
+                        -
+                        {%- endif -%}
+                    </div>
+                    <div class="col-md-3 col-sm-3 d-none d-sm-block">{{ invite.invited_email or "-" }}</div>
+                    <div class="col-md-2 col-sm-2 col-3">{{ status_badge(invite.status) }}</div>
+                    <div class="col-md-2 col-sm-2 d-none d-sm-block">{{ invite.created_at|format_date }}</div>
+                    <div class="col-md-1 col-sm-1 col-3">
+                        {% if invite.status == "pending" %}
+                        {{ action_confirm(
+                            "revoke-" ~ invite.id,
+                            url_for("inviteonly.revoke_invite", invite_id=invite.id),
+                            _("Revoke"),
+                            icon="fas fa-ban text-danger"
+                        ) }}
+                        {% endif %}
+                    </div>
+                </div>
+            {% else %}
+                <div class="row settings-row">
+                    <div class="col-12 ps-3">{% trans %}No invitations yet.{% endtrans %}</div>
+                </div>
+            {% endfor %}
+            </div>
+        </div>
+
+        <div class="card-footer settings-footer p-2">
+            {{ render_pagination(invites, url_for('inviteonly.admin_invitations')) }}
+        </div>
+    </div>
+</div>
+
+{% include theme('_partials/confirm_dialog.html') %}
+{% endblock %}