mod_invites: fix redirect_url

[sstrigler]

Before creating a ticket, please consider if this should fit the discussion forum better.

Environment

• ejabberd version: 26.01+
• Erlang version: any
• OS: any
• Installed from: any

Configuration (only if needed): grep -Ev '^$|^\s*#' ejabberd.yml

mod_invites: {}
mod_register:
  allow_modules:
    - mod_invites # ??? maybe also mod_register_web?
  register_url: ...
...

I.e. semi-open ibr that will redirect to redirec_url but allows to use mod_invites account creation tokens

Errors from error.log/crash.log

Probably none.

Bug description

If redirect_url is set, registration with pre-auth token still get's redirected and as such doesn't work. Instead redirect_url should be disregarded if a valid pre-auth token has been sent.

[badlop]

I am not able to reproduce this problem, maybe my configuration misses something, or some step?

---

Using ejabberd git master, enabled mod_invites, mod_conversejs, and also configured:

  mod_register:
    ip_access: trusted_network
    redirect_url: http://localhost/testtest

Steps:

1. in conversejs, the registration form says "To register, visit..."
2. generate an invitation: ejabberdctl generate_invite localhost
3. visit the invite url
4. register the account
5. it's correctly registered
6. i can login using conversejs

---

Now I try allowing only mod_invites to register accounts:

  mod_register:
    ip_access: trusted_network
    allow_modules:
      - mod_invites
    redirect_url: http://localhost/testtest

1. conversejs does not show the registration form, it can only login
2. generate an invitation: ejabberdctl generate_invite localhost
3. visit url
4. register account
5. finishes correctly, account is created
6. i can login using conversejs

[sstrigler]

User feedback:

Tue Feb 17 11:47:20 2026 - rain:
https://upload.jabberworld.info/u/ec27dcda43c1bdb422cd46afa492a43811cee88a/9qez76HXc3/zb2rhhi58wzJwcKP7yiSesJq4awDxJttQgHF9SfYfpU3TmYnB.jpg
https://upload.jabberworld.info/u/ec27dcda43c1bdb422cd46afa492a43811cee88a/pUt9rLQkUz/zb2rhgg9SALW1Hq64A1uNGM8zH9Ju87nHHSW6pY1bCun3HKSc.jpg
https://upload.jabberworld.info/u/ec27dcda43c1bdb422cd46afa492a43811cee88a/OlwIhQYHqy/zb2rhaHkVPGff2bdK6EPqS5bWN4JnpdDxQpw9zGrRkQJxYDHP.jpg

their config

  mod_invites:
    landing_page: https://join.{{ host }}/invites/{{ invite.token }}
    access_create_account: local

  mod_register:

    ip_access: all
    
    captcha_protected: true
    redirect_url: "https://jabber.name/registration/"
    allow_modules:
     - "mod_invites"

[ravermeister]

@badlop could this get merged? 🙃

[badlop]

The related PR got some improvements in recent hours, better wait to merge when the PR author confirms the PR is ready for merge :)

[sstrigler]

It’s ready. Just added another test. Now testing for redirect_url before and after sending pre auth token.