Skip to main content

Accept Invitation

POST 
/auth/accept-invitation

Consume an invitation for the ALB-verified caller.

Runs AFTER Cognito/ALB authentication but BEFORE the user is provisioned, so it verifies the ALB header itself rather than depending on get_principal (which rejects an unprovisioned identity). Atomically provisions the user, external identity, and workspace membership via the invitation service.

Only served on the configured browser host — the same host boundary get_principal applies — so a valid ALB token presented on the API host is rejected.

Request​

Responses​

Successful Response