I am unable to invite any new user to the system.
The link is generated, is sent to user, but when it is opened new user receive error:
invitation not accepted. Expired.
Invite new user.
The genrated link send by email does not work.
Invitation not accepted
Expected Behavior
User can create own password
Originally created by @chris100pher on GitHub (Feb 6, 2026).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/2426
Originally assigned to: @miloschwartz on GitHub.
### Describe the Bug
I am unable to invite any new user to the system.
The link is generated, is sent to user, but when it is opened new user receive error:
invitation not accepted. Expired.
The issue was described in #1355
### Environment
- OS Type & Version: (e.g., Ubuntu 22.04)
- Pangolin Version: 1.15.2
- Gerbil Version: latest
- Traefik Version: latest
- Newt Version: 1.18
- Olm Version: (if applicable)
### To Reproduce
Invite new user.
The genrated link send by email does not work.
Invitation not accepted
### Expected Behavior
User can create own password
@oschwartz10612 commented on GitHub (Feb 25, 2026):
Do you see any logs in the Pangolin server when this occurs or on the user's browser console?
<!-- gh-comment-id:3961808019 -->
@oschwartz10612 commented on GitHub (Feb 25, 2026):
Do you see any logs in the Pangolin server when this occurs or on the user's browser console?
For me, I'm getting an HTTP 400 - Bad Request Answer. I'm just using the link from the Dashboard which I get when I created an user in Organisation X.
answerheaders:
In the docker logs for Pangolin there weren't any output. For Traefik and Gerbil I couldn't find anything relevant in the Docker logs.
Maybe it helps a little bit. :)
<!-- gh-comment-id:3967847539 -->
@aarhor commented on GitHub (Feb 26, 2026):
For me, I'm getting an HTTP 400 - Bad Request Answer. I'm just using the link from the Dashboard which I get when I created an user in Organisation X.
answerheaders:
> HTTP/2 400
> content-type: application/json; charset=utf-8
> date: Thu, 26 Feb 2026 16:31:20 GMT
> x-robots-tag: noindex
> content-length: 125
> X-Firefox-Spdy: h2
==> `{
"error": true,
"code": 400,
"message": "Bad Request",
"description": "The server did not understand the request"
}`
requestheaders:
> POST /api/v1/invite/accept HTTP/2
> Host: pangolin.domain.tld
> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0
> Accept: application/json, text/plain, */*
> Accept-Language: de,en-US;q=0.9,en;q=0.8
> Accept-Encoding: gzip, deflate, br, zstd
> Content-Type: application/json
> X-CSRF-Token: x-csrf-protection
> Content-Length: 68
> Origin: https://pangolin.domain.tld
> Sec-GPC: 1
> Connection: keep-alive
> Referer: https://pangolin.domain.tld/invite?token=jBhjTKkhJ0-zGhOhFmH7cdObDrHmAimjT956BaTpAZv&email=pangolintest%40mail.domain.tld
> Sec-Fetch-Dest: empty
> Sec-Fetch-Mode: cors
> Sec-Fetch-Site: same-origin
> TE: trailers
==> `{"inviteId":"jBhjTKkhJ0","token":"zGhOhFmH7cdObDrHmAimjT956BaTpAZv"}`
In the docker logs for Pangolin there weren't any output. For Traefik and Gerbil I couldn't find anything relevant in the Docker logs.
Maybe it helps a little bit. :)
@oschwartz10612 commented on GitHub (Feb 26, 2026):
Does it work in a different browser or if you clear your browser cache?
<!-- gh-comment-id:3968486364 -->
@oschwartz10612 commented on GitHub (Feb 26, 2026):
Does it work in a different browser or if you clear your browser cache?
No. With Chrome, Edge and Firefox (all newest Version and in incognito mode) I get the same response like before.
<!-- gh-comment-id:3968801701 -->
@aarhor commented on GitHub (Feb 26, 2026):
No. With Chrome, Edge and Firefox (all newest Version and in incognito mode) I get the same response like before.
I found solution for me.
I am getting same error 400 - however the issue in my case was caused by error catching middleware configured in traefik dynamic config file:
http:
middlewares:
errory:
errors:
status: - "400-405"
- "410-599"
service: error-service
query: "/{status}.html"
When I changed confirguration to not catch Error 400 system works as desired - goes to next screen allowing user to fill in and create password.
<!-- gh-comment-id:3977012793 -->
@chris100pher commented on GitHub (Feb 28, 2026):
I found solution for me.
I am getting same error 400 - however the issue in my case was caused by error catching middleware configured in traefik dynamic config file:
http:
middlewares:
errory:
errors:
status:
**- "400-405"**
- "410-599"
service: error-service
query: "/{status}.html"
When I changed confirguration to not catch Error 400 system works as desired - goes to next screen allowing user to fill in and create password.
New dynamic config is as below:
http:
middlewares:
errory:
errors:
status:
**- "401-405"**
- "410-599"
service: error-service
query: "/{status}.html"
The workaround also worked for me, but still geting the 400 when I look in the console. So, maybe an error in Traefik?
<!-- gh-comment-id:3977200534 -->
@aarhor commented on GitHub (Feb 28, 2026):
The workaround also worked for me, but still geting the 400 when I look in the console. So, maybe an error in Traefik?
@LaurenceJJones commented on GitHub (Mar 1, 2026):
We should definitely fix the 400 response, the only thing im puzzled by is the errory middle ware that been setup is not default provided by pangolin installer?
cause that middleware intercepts a response and returns a generic page instead of pangolins response.
<!-- gh-comment-id:3979428014 -->
@LaurenceJJones commented on GitHub (Mar 1, 2026):
We should definitely fix the 400 response, the only thing im puzzled by is the `errory` middle ware that been setup is not default provided by pangolin installer?
cause that middleware intercepts a response and returns a generic page instead of pangolins response.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @chris100pher on GitHub (Feb 6, 2026).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/2426
Originally assigned to: @miloschwartz on GitHub.
Describe the Bug
I am unable to invite any new user to the system.
The link is generated, is sent to user, but when it is opened new user receive error:
invitation not accepted. Expired.
The issue was described in #1355
Environment
To Reproduce
Invite new user.
The genrated link send by email does not work.
Invitation not accepted
Expected Behavior
User can create own password
@aarhor commented on GitHub (Feb 13, 2026):
I have the same issue. My Installation (on an VPS) is on Version 1.15.4.
@oschwartz10612 commented on GitHub (Feb 25, 2026):
Do you see any logs in the Pangolin server when this occurs or on the user's browser console?
@aarhor commented on GitHub (Feb 26, 2026):
For me, I'm getting an HTTP 400 - Bad Request Answer. I'm just using the link from the Dashboard which I get when I created an user in Organisation X.
answerheaders:
==>
{ "error": true, "code": 400, "message": "Bad Request", "description": "The server did not understand the request" }requestheaders:
==>
{"inviteId":"jBhjTKkhJ0","token":"zGhOhFmH7cdObDrHmAimjT956BaTpAZv"}In the docker logs for Pangolin there weren't any output. For Traefik and Gerbil I couldn't find anything relevant in the Docker logs.
Maybe it helps a little bit. :)
@oschwartz10612 commented on GitHub (Feb 26, 2026):
Does it work in a different browser or if you clear your browser cache?
@aarhor commented on GitHub (Feb 26, 2026):
No. With Chrome, Edge and Firefox (all newest Version and in incognito mode) I get the same response like before.
@chris100pher commented on GitHub (Feb 28, 2026):
I found solution for me.
I am getting same error 400 - however the issue in my case was caused by error catching middleware configured in traefik dynamic config file:
http:
middlewares:
errory:
errors:
status:
- "400-405"
- "410-599"
service: error-service
query: "/{status}.html"
When I changed confirguration to not catch Error 400 system works as desired - goes to next screen allowing user to fill in and create password.
New dynamic config is as below:
http:
middlewares:
errory:
errors:
status:
- "401-405"
- "410-599"
service: error-service
query: "/{status}.html"
@aarhor commented on GitHub (Feb 28, 2026):
The workaround also worked for me, but still geting the 400 when I look in the console. So, maybe an error in Traefik?
@LaurenceJJones commented on GitHub (Mar 1, 2026):
We should definitely fix the 400 response, the only thing im puzzled by is the
errorymiddle ware that been setup is not default provided by pangolin installer?cause that middleware intercepts a response and returns a generic page instead of pangolins response.