Proposal/teacher onboarding mvp by CarlyAThomas · Pull Request #595 · freeCodeCamp/classroom

CarlyAThomas · 2026-05-18T22:40:01Z

Checklist:

I have read freeCodeCamp's contribution guidelines.
My pull request has a descriptive title (not a vague title like Update index.md)

This PR is not associated with a specific issue

Case Study (Teacher Invite Acceptance Flow)

Admin creates/resends a teacher invite from the admin dashboard.
System sends a secure email link: /teacher/invite/<token>.
Invited teacher signs in with the invited email.
Teacher accepts invite.
Invitation becomes ACCEPTED and user role is set to TEACHER.

What Changed (and Why)

Teacher invite backend APIs to support create/list/resend/revoke and secure acceptance.
Reason: completes the core onboarding lifecycle with role-safe state transitions.
Files:
pages/api/admin/teacher_invites/create.js
pages/api/admin/teacher_invites/list.js
pages/api/admin/teacher_invites/resend.js
pages/api/admin/teacher_invites/revoke.js
pages/api/teacher_invites/accept.js
util/inviteApiUtils.js
Email delivery + feature flag rollout support.
Reason: enables controlled rollout and real invitation delivery.
Files:
util/inviteEmail.js
util/featureFlags.js
package.json
package-lock.json
Admin + teacher UI flow.
Reason: gives a usable end-to-end path from invite creation to invite acceptance.
Files:
components/TeacherInvitesPanel.js
components/TeacherInvitesPanel.module.css
pages/admin/index.js
pages/teacher/invite/[inviteToken].js
styles/Home.module.css
pages/error.js
Data model + migration for invitation lifecycle.
Reason: persists invitation state and supports expiry/revoke/accept transitions.
Files:
prisma/schema.prisma
prisma/migrations/20260409192210_add_invitation_models/migration.sql
Env/security/docs updates.
Reason: prevent future secret leaks and keep setup clear with tracked templates.
Files:
.gitignore
.env.sample
.env.development.example
.env.production.example
README.md
.env.development / .env.production removed from tracking

Validation

npm run lint:code
npm test

How to Test

Prerequisites
This branch allows you to create an ADMIN account and send out email invitations to users to onboard as teachers.
You need:

1 "Admin" email (to serve as your ADMIN, and set up your Classroom account)
1+ extra "Teacher" emails (to receive email invites and onboard as teachers)

Configuring this branch for local development

Create a local branch that tracks the CarlyAThomas:proposal/teacher-onboarding-mvp branch.
Run cp .env.development.example .env.development
Update SMTP_USER in .env.development with your Admin Email.
Go to myaccount.google.com/apppasswords. Make sure you're using your ADMIN email for steps 3-6.
Type in the name of the Application (FCC Classroom) and select create.
Google generates a 16-character password
Copy that password (not your Gmail password)
Update SMTP_PASS in .env.development with the new password.

Running the app

In the terminal, run npx prisma migrate reset, and press y to reset your database.
Run npm run develop and npx prisma studio to run the project.
Log in with your "Admin" email.
In prisma studio, set your Admin account's role to ADMIN.

Testing

Go to the /admin page
Type out your TEACHER email address, then press Enter.
Open an Incognito tab, or a different browser, so you can log into a different account.
Go to your TEACHER email address and onboard using the link provided. (Use Case: Onboarding a Teacher with a brand new account)
(Alternative) Open localhost:3001 again and create a Classroom account with your TEACHER email address. Then, repeat step 4. (Use Case: Onboarding a Teacher who already has an account)

…nel integration

…cceptance page, tests)

…ity signature - Convert pages/error.js and pages/teacher/invite/[inviteToken].js to modern Next.js Link pattern (no nested anchors) - Refactor util/inviteEmail.js to accept object params {invitedTeacherEmail, inviteUrl, expiresAt, invitedByEmail} - Ensures proper Nodemailer integration for teacher invitation emails

- redesign invite acceptance page with FCC-aligned styling - update teacher invitation email content and branding hierarchy - fix teacher invite post-accept redirect by role - improve revoke API message for inactive invites - add README testing/setup notes for SMTP invite flow

socket-security · 2026-05-18T22:40:42Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	nodemailer@6.10.1

View full report

utsab

Overall, this PR is a solid end-to-end workflow for the teacher invite. Nice work.

Can you add some tests? Given that there are so many status change branches (pending, accepted, rejected, expired), it would be good to have a test that verifies that each status is assigned correctly. You can mock the 3rd party apps (like the SMTP server).

You may also want to add a test to confirm that an uninvited teacher cannot access the classes page.

utsab · 2026-06-16T00:55:27Z

+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "StudentInvitation_pkey" PRIMARY KEY ("studentInvitationId")
+);


The StudentInvitation schema changes don't seem like they belong in this PR.

utsab · 2026-06-16T00:59:39Z

+  const handleSignIn = async () => {
+    await signIn('auth0');
+  };


We are hardcoding auth0 which means a contributor using the Github oAuth would not be able to test this feature locally. I'm not totally opposed to only supporting auth0, but I'm curious, how difficult/complicated would it be to support both auth0 and Github oAuth?

If we do decide to only support auth0, then we should document somewhere in the README that if a developer decides to go with Github oAuth, certain features (like Teacher Invitations) won't work.

utsab · 2026-06-16T01:06:49Z

 - No port conflicts occur because domains are different
 - The port changes in this repository are primarily for local development

+### Teacher Invitation Email Setup


The documentation is great, but I'm concerned the README.md is getting too long. Can you create a subpage for this documentation and link it from the README?

We have a separate issue & PR for this! Issue #593 and PR #605

CarlyAThomas added 13 commits April 27, 2026 17:31

feat: add teacher onboarding MVP updates

ade078c

docs: update TODO with join link review section and ZZZ notes status

b848a18

test: update classInviteTable snapshot after GraphQL/StudentInvitesPa…

d7af71c

…nel integration

feat: teacher onboarding MVP (remove student-only components)

22122d8

feat: add teacher invite email, feature flag, acceptance flow, and tests

8122f5e

feat: add teacher invite implementation files (feature flag, email, a…

6889aee

…cceptance page, tests)

chore: remove test files with external dependencies

28ea0f4

docs: update TODO to note manual integration testing

4494000

chore: remove onboarding notes docs from teacher MVP branch

c7f2d4a

chore: ignore and untrack development/production env files

256bffe

docs: add tracked env templates for development and production

265fda0

CarlyAThomas requested a review from a team as a code owner May 18, 2026 22:40

fix: quote Accept Invitation in onboarding email text

fca2eec

utsab requested changes Jun 16, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Proposal/teacher onboarding mvp#595

Proposal/teacher onboarding mvp#595
CarlyAThomas wants to merge 14 commits into
freeCodeCamp:mainfrom
CarlyAThomas:proposal/teacher-onboarding-mvp

CarlyAThomas commented May 18, 2026 •

edited by NewtonLC

Loading

Uh oh!

socket-security Bot commented May 18, 2026 •

edited

Loading

Uh oh!

utsab left a comment •

edited

Loading

Uh oh!

utsab Jun 16, 2026

Uh oh!

utsab Jun 16, 2026 •

edited

Loading

Uh oh!

utsab Jun 16, 2026

Uh oh!

NewtonLC Jun 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

CarlyAThomas commented May 18, 2026 • edited by NewtonLC Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Case Study (Teacher Invite Acceptance Flow)

What Changed (and Why)

Validation

How to Test

Uh oh!

socket-security Bot commented May 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

utsab left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

utsab Jun 16, 2026

Choose a reason for hiding this comment

Uh oh!

utsab Jun 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

utsab Jun 16, 2026

Choose a reason for hiding this comment

Uh oh!

NewtonLC Jun 16, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

CarlyAThomas commented May 18, 2026 •

edited by NewtonLC

Loading

socket-security Bot commented May 18, 2026 •

edited

Loading

utsab left a comment •

edited

Loading

utsab Jun 16, 2026 •

edited

Loading