From 9406b2bd31a0db65201f842cea687b616ef16ac2 Mon Sep 17 00:00:00 2001
From: Jakob Ackermann <jakob.ackermann@overleaf.com>
Date: Wed, 3 Jul 2024 12:17:28 +0200
Subject: [PATCH] Merge pull request #19245 from overleaf/jpa-fix-invite

[web] use project invite token from request path

GitOrigin-RevId: d2670c3f10f8c9a15420fab7506f9ebdf4108c6c
---
 .../Features/Collaborators/CollaboratorsInviteController.js   | 1 +
 services/web/app/views/project/invite/show.pug                | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/services/web/app/src/Features/Collaborators/CollaboratorsInviteController.js b/services/web/app/src/Features/Collaborators/CollaboratorsInviteController.js
index efaccabbcb..9f9b154a6b 100644
--- a/services/web/app/src/Features/Collaborators/CollaboratorsInviteController.js
+++ b/services/web/app/src/Features/Collaborators/CollaboratorsInviteController.js
@@ -328,6 +328,7 @@ const CollaboratorsInviteController = {
     // finally render the invite
     res.render('project/invite/show', {
       invite,
+      token,
       project,
       owner,
       title: 'Project Invite',
diff --git a/services/web/app/views/project/invite/show.pug b/services/web/app/views/project/invite/show.pug
index 49945f59c7..434c7f2976 100644
--- a/services/web/app/views/project/invite/show.pug
+++ b/services/web/app/views/project/invite/show.pug
@@ -20,10 +20,10 @@ block content
 								form.form(
 									data-ol-regular-form
 									method="POST",
-									action="/project/"+invite.projectId+"/invite/token/"+invite.token+"/accept"
+									action="/project/"+invite.projectId+"/invite/token/"+token+"/accept"
 								)
 									input(name='_csrf', type='hidden', value=csrfToken)
-									input(name='token', type='hidden', value=invite.token)
+									input(name='token', type='hidden', value=token)
 									.form-group.text-center
 										button.btn.btn-lg.btn-primary(
 											type="submit"