Request an invite acceptance code

POST 
/api/v1/invites/:inviteId/challenges

Public endpoint (no auth) used by an invited external user to request a 6-character verification code by email, ahead of setting their password. Rate-limited per email (5 requests per 1-hour window).

Request

Responses

201

Challenge created and code emailed (no body)

403

Local auth provider not enabled, or domain not allowed (FORBIDDEN)

404

Invite not found, or email doesn't match the invite (INVITE_NOT_FOUND)

429

Rate limit exceeded (RATE_LIMIT_EXCEEDED)