POST/api/public/activate-account

Activates a newly created user account and sets the first password, triggered via the link in the invitation email.

Auth & Security

No authentication required

Idempotent: No

Parameters

token(body, string, required)— Activation token from the invitation email
password(body, string, required)— Password to be set

Example Request

{"token":"<token from activation email>","password":"YourNewSecurePassword!"}

Example Response

{"ok":true}

Error Codes

400 INVALID_TOKEN — Invalid, already used or expired activation link.

Live Test Proof

Negative case (400, fabricated token) verified live. A success case would require a real, freshly provisioned account with an actual activation link — not reproduced.

← Public Forms