{{-- The access-request review page, opened from the link in the admin email. Deliberately self-contained — no layout, no build step, no app assets. The whole point of this page is that it works when the SPA is gated and when the admin is on a phone, so it carries its own styling and nothing else. It renders. It does not act. The decision below is a POST, because a GET that granted access would be triggered by every mail security scanner that prefetches links before a human opens the message. --}} {{ $title }}

{{ ucfirst(config('app.name')) }} · authorized access

{{ $title }}

@if ($message)

{{ $message }}

@endif @if ($req)

Verify this person by phone or WhatsApp before approving. Approving lets them sign in with a one-time code sent to their email.

Name
{{ $req->first_name }} {{ $req->last_name }}
Email
{{ $req->email }}
Phone
{{ $req->phone }}
WhatsApp
{{ $req->whatsapp }}
City
{{ $req->city }}
State
{{ $req->state ?: '—' }}
Country
{{ $country ?: '—' }}
Requested
{{ optional($req->created_at)->toDayDateTimeString() }}
{{-- POST, not a link: a prefetching mail scanner must not be able to decide this. --}}

This link expires seven days after the request was made, and stops working once a decision is recorded.

@endif