snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

apps/meteor/server/lib/rooms/invites/useInviteToken.ts

@@ -0,0 +1,69 @@
+import { isBannedSubscription } from '@rocket.chat/core-typings';
+import { Invites, Subscriptions, Users } from '@rocket.chat/models';
+import { Meteor } from 'meteor/meteor';
+
+import { validateInviteToken } from './validateInviteToken';
+import { RoomMemberActions } from '../../../../definition/IRoomTypeConfig';
+import { addUserToRoom } from '../addUserToRoom';
+import { roomCoordinator } from '../roomCoordinator';
+
+export const useInviteToken = async (userId: string, token: string) => {
+	if (!userId) {
+		throw new Meteor.Error('error-invalid-user', 'The user is invalid', {
+			method: 'useInviteToken',
+			field: 'userId',
+		});
+	}
+
+	if (!token) {
+		throw new Meteor.Error('error-invalid-token', 'The invite token is invalid.', {
+			method: 'useInviteToken',
+			field: 'token',
+		});
+	}
+
+	const { inviteData, room } = await validateInviteToken(token);
+
+	if (!(await roomCoordinator.getRoomDirectives(room.t).allowMemberAction(room, RoomMemberActions.INVITE, userId))) {
+		throw new Meteor.Error('error-room-type-not-allowed', "Can't join room of this type via invite", {
+			method: 'useInviteToken',
+			field: 'token',
+		});
+	}
+
+	const user = await Users.findOneById(userId);
+	if (!user) {
+		throw new Meteor.Error('error-invalid-user', 'The user is invalid', {
+			method: 'useInviteToken',
+			field: 'userId',
+		});
+	}
+	const subscription = await Subscriptions.findOneByRoomIdAndUserId(room._id, user._id);
+	if (subscription && isBannedSubscription(subscription)) {
+		throw new Meteor.Error('error-user-is-banned', 'User is banned from this room', {
+			method: 'useInviteToken',
+		});
+	}
+
+	await Users.updateInviteToken(user._id, token);
+
+	if (!subscription) {
+		await Invites.increaseUsageById(inviteData._id, 1);
+	}
+
+	// If the user already has an username, then join the invite room,
+	// If no username is set yet, then the the join will happen on the setUsername method
+	if (user.username) {
+		await addUserToRoom(room._id, user);
+	}
+
+	return {
+		room: {
+			rid: inviteData.rid,
+			prid: room.prid,
+			fname: room.fname,
+			name: room.name,
+			t: room.t,
+		},
+	};
+};