TeamInvitationGET /api/invitations/mine; the caller is authorized to redeem these, so thetoken is legitimately theirs to see.{
"created": "2019-08-24T14:15:22.123Z",
"expires_at": "2019-08-24T14:15:22.123Z",
"id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
"invited_by_profile_id": "aff8fcd7-81a6-4388-bf0b-9f64465f4029",
"invited_email": "string",
"role": "owner",
"status": "pending",
"team_id": "810007d0-bec5-486c-b5d1-28fcd8a079ba",
"team_name": "string",
"team_slug": "string",
"token": "string"
}