Mandate Form Token Expiry & Reissuance
Mandate Form Token Expiry & Reissuance
Available from: v1.0.82
Mandate form invites are delivered to tenants as unique, time-limited URLs. This document covers what happens when a token expires and how admins can reissue a new invite.
How Mandate Invite Tokens Work
When a letting agent sends a tenant a mandate invite, the service generates a unique token embedded in the form URL. This token:
- Is single-use — once the tenant completes the form, the token is consumed
- Has an expiry — if the tenant does not complete the form within the allowed window, the token becomes invalid
Expired or Used Token — Tenant Experience
If a tenant opens a mandate form URL that has expired or has already been used, they are shown a clear error page explaining that the link is no longer valid. The page instructs them to contact their letting agent to request a new link.
This prevents tenants from seeing a broken or partially loaded form with no context.
Invite Status
The mandate record in the admin dashboard displays the current invite status at a glance:
| Status | Meaning |
|---|---|
pending | Invite has been sent; the tenant has not yet completed the form |
expired | The token has expired or was already consumed |
completed | The tenant has successfully submitted the mandate form |
Reissuing an Invite (Admin)
When an invite has expired or a tenant reports they did not receive the original email, an admin can reissue the invite directly from the mandate record.
Via the Dashboard
- Navigate to the mandate record in the admin dashboard.
- The current invite status is shown on the record (e.g.
expired). - Click the Resend action button.
- The system will:
- Cancel the existing token
- Generate a new token
- Send a fresh invite email to the tenant
Via the API (tRPC)
The reissuance procedure is exposed as a tRPC admin procedure. Calling it with the relevant invite or mandate identifier will perform the same three-step operation (cancel → create → email) atomically.
Note: Only one active token can exist per mandate invite at any time. Reissuing automatically invalidates the previous token.
Important Considerations
- Old links become immediately invalid after a reissuance — if a tenant had already opened the old link and had the form partially in progress, they will need to start again with the new URL.
- The invite status on the dashboard updates in real time to reflect the latest state after a reissuance.
- Reissuance is limited to existing invite records; it does not create a new mandate record.