- Shipped
- August 6, 2026 at 12:02 AM UTC
- Author
- kamo
- Commit
- 93be0c8
A meeting link written into an email was pointing at /meet/join/<id>, which mints a one-time key from the clicker's Kamo session — and redirects anyone without one straight to the login page. Every external recipient an email is actually addressed to hit that wall instead of the meeting. Send the provider's own participant URL instead: meet.<domain>/<room> for Kamo Meets, the Teams or Zoom join link otherwise. All three are joinable by people with no Kamo account, which is what an invitation sent to an arbitrary address has to be. How long one stays valid remains the org's guestLinkExpiryHours policy, enforced by MediaService. The two links are now named for who can use them — publicJoinUrl and memberJoinUrl — because they are interchangeable at a glance and picking wrong locks the recipient out silently. hostUrl is deliberately not exposed at all: Zoom's is a start_url carrying host authority. The passcode rides along when the org requires one, or the link alone still admits nobody. The calendar-invite composer, whose URL is emailed to external attendees too, gets the same treatment.