CorebanqCorebanq Developer Docs
Usersv1Admin

Resend internal user invitation

Resend invitation email to internal platform user. Requires authentication and Internal role with Update permission on users. Subject to rate limiting: a fixed cooldown between resends and a capped number of resends per fixed one-hour window (window resets from the first resend, not a true sliding window), both configurable at runtime via security.invitation_rate_limiting (defaults: 5 minute cooldown, max 3 per hour; security.invitation_rate_limiting.enabled toggles the limiter off entirely).

POST
/v1/users/{id}/admin/resend-invitation

Authorization

bearerAuth
AuthorizationBearer <token>

In: header

Path Parameters

id*string

Internal user ID to resend invitation for

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/v1/users/497f6eca-6276-4993-bfeb-53cbbbba6f08/admin/resend-invitation"
{
  "user_id": "a169451c-8525-4352-b8ca-070dd449a1a5",
  "email": "user@example.com",
  "status": "pending_activation",
  "invite_sent_at": "2019-08-24T14:15:22Z",
  "invite_expires_at": "2019-08-24T14:15:22Z"
}
{
  "status": 400,
  "message": "Invalid user input",
  "code": "users_m.invalid_user_input",
  "class": "validation"
}
{
  "status": 401,
  "message": "Unauthorized",
  "code": "common.unauthorized",
  "class": "business"
}
{
  "status": 403,
  "message": "No access to the record",
  "code": "common.rbac_no_rec_access",
  "class": "business"
}
{
  "status": 404,
  "message": "User not found",
  "code": "common.user_not_found",
  "class": "business"
}

{
  "status": 429,
  "message": "Please wait 4 minutes 30 seconds before resending invitation",
  "code": "users_m.invitation_resend_cooldown_active",
  "class": "temporary",
  "retryable": true
}

{
  "status": 500,
  "message": "Internal server error",
  "code": "common.server_error",
  "class": "business"
}

{
  "overall_status": "unhealthy",
  "message": "Service is shutting down",
  "timestamp": "2026-08-27T15:04:05Z"
}

POSTInvite internal user

Invite internal platform user with role assignment (requires Internal role + Create permission on users). The invited user's stored mfa_mode is seeded from auth.internal_invite.mfa_mode in the auth app-config module (totp, email, or phone).

POSTResend regular user invitation

Resend invitation email to regular (non-internal) user. Requires authentication and Internal role with Update permission on users. Subject to rate limiting: a fixed cooldown between resends and a capped number of resends per fixed one-hour window (window resets from the first resend, not a true sliding window), both configurable at runtime via security.invitation_rate_limiting (defaults: 5 minute cooldown, max 3 per hour; security.invitation_rate_limiting.enabled toggles the limiter off entirely).