Merge pull request #19245 from overleaf/jpa-fix-invite

[web] use project invite token from request path

GitOrigin-RevId: d2670c3f10f8c9a15420fab7506f9ebdf4108c6c

services/web/app/src/Features/Collaborators/CollaboratorsInviteController.js

@@ -328,6 +328,7 @@ const CollaboratorsInviteController = {
     // finally render the invite
     res.render('project/invite/show', {
       invite,
+      token,
       project,
       owner,
       title: 'Project Invite',

services/web/app/views/project/invite/show.pug

@@ -20,10 +20,10 @@ block content
 								form.form(
 									data-ol-regular-form
 									method="POST",
-									action="/project/"+invite.projectId+"/invite/token/"+invite.token+"/accept"
+									action="/project/"+invite.projectId+"/invite/token/"+token+"/accept"
 								)
 									input(name='_csrf', type='hidden', value=csrfToken)
-									input(name='token', type='hidden', value=invite.token)
+									input(name='token', type='hidden', value=token)
 									.form-group.text-center
 										button.btn.btn-lg.btn-primary(
 											type="submit"