- Shipped
- September 4, 2026 at 5:33 AM UTC
- Author
- Kamo
- Commit
- 8ab77fe
A candidate can now apply from the public careers site without an account. The application is stored against the email address they typed, and the receipt carries a single-use claim token that attaches it to an account they create afterwards. That account is created here, and registration ends on a different host, so the token is parked in the same apex-scoped cookie the job uid already uses — the one thing that survives the trip. Written separately from the uid because the two do not always travel together: /team?jobId=... reached straight off an advert has no application to claim. Skip this and the application is stranded — HR keeps an anonymous copy, the member sees nothing to track, and applying again from the workspace files a duplicate.