[GH-ISSUE #2426] Invitation not accepted/ expired #2166

Open
opened 2026-04-16 09:12:06 -05:00 by GiteaMirror · 8 comments
Owner

Originally created by @chris100pher on GitHub (Feb 6, 2026).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/2426

Originally assigned to: @miloschwartz on GitHub.

Describe the Bug

I am unable to invite any new user to the system.
The link is generated, is sent to user, but when it is opened new user receive error:
invitation not accepted. Expired.

The issue was described in #1355

Environment

  • OS Type & Version: (e.g., Ubuntu 22.04)
  • Pangolin Version: 1.15.2
  • Gerbil Version: latest
  • Traefik Version: latest
  • Newt Version: 1.18
  • Olm Version: (if applicable)

To Reproduce

Invite new user.
The genrated link send by email does not work.
Invitation not accepted

Expected Behavior

User can create own password

Originally created by @chris100pher on GitHub (Feb 6, 2026). Original GitHub issue: https://github.com/fosrl/pangolin/issues/2426 Originally assigned to: @miloschwartz on GitHub. ### Describe the Bug I am unable to invite any new user to the system. The link is generated, is sent to user, but when it is opened new user receive error: invitation not accepted. Expired. The issue was described in #1355 ### Environment - OS Type & Version: (e.g., Ubuntu 22.04) - Pangolin Version: 1.15.2 - Gerbil Version: latest - Traefik Version: latest - Newt Version: 1.18 - Olm Version: (if applicable) ### To Reproduce Invite new user. The genrated link send by email does not work. Invitation not accepted ### Expected Behavior User can create own password
GiteaMirror added the needs investigating label 2026-04-16 09:12:06 -05:00
Author
Owner

@aarhor commented on GitHub (Feb 13, 2026):

I have the same issue. My Installation (on an VPS) is on Version 1.15.4.

<!-- gh-comment-id:3897488702 --> @aarhor commented on GitHub (Feb 13, 2026): I have the same issue. My Installation (on an VPS) is on Version 1.15.4.
Author
Owner

@oschwartz10612 commented on GitHub (Feb 25, 2026):

Do you see any logs in the Pangolin server when this occurs or on the user's browser console?

<!-- gh-comment-id:3961808019 --> @oschwartz10612 commented on GitHub (Feb 25, 2026): Do you see any logs in the Pangolin server when this occurs or on the user's browser console?
Author
Owner

@aarhor commented on GitHub (Feb 26, 2026):

For me, I'm getting an HTTP 400 - Bad Request Answer. I'm just using the link from the Dashboard which I get when I created an user in Organisation X.
answerheaders:

HTTP/2 400
content-type: application/json; charset=utf-8
date: Thu, 26 Feb 2026 16:31:20 GMT
x-robots-tag: noindex
content-length: 125
X-Firefox-Spdy: h2

==> { "error": true, "code": 400, "message": "Bad Request", "description": "The server did not understand the request" }

requestheaders:

POST /api/v1/invite/accept HTTP/2
Host: pangolin.domain.tld
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0
Accept: application/json, text/plain, /
Accept-Language: de,en-US;q=0.9,en;q=0.8
Accept-Encoding: gzip, deflate, br, zstd
Content-Type: application/json
X-CSRF-Token: x-csrf-protection
Content-Length: 68
Origin: https://pangolin.domain.tld
Sec-GPC: 1
Connection: keep-alive
Referer: https://pangolin.domain.tld/invite?token=jBhjTKkhJ0-zGhOhFmH7cdObDrHmAimjT956BaTpAZv&email=pangolintest%40mail.domain.tld
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

==> {"inviteId":"jBhjTKkhJ0","token":"zGhOhFmH7cdObDrHmAimjT956BaTpAZv"}

In the docker logs for Pangolin there weren't any output. For Traefik and Gerbil I couldn't find anything relevant in the Docker logs.
Maybe it helps a little bit. :)

<!-- gh-comment-id:3967847539 --> @aarhor commented on GitHub (Feb 26, 2026): For me, I'm getting an HTTP 400 - Bad Request Answer. I'm just using the link from the Dashboard which I get when I created an user in Organisation X. answerheaders: > HTTP/2 400 > content-type: application/json; charset=utf-8 > date: Thu, 26 Feb 2026 16:31:20 GMT > x-robots-tag: noindex > content-length: 125 > X-Firefox-Spdy: h2 ==> `{ "error": true, "code": 400, "message": "Bad Request", "description": "The server did not understand the request" }` requestheaders: > POST /api/v1/invite/accept HTTP/2 > Host: pangolin.domain.tld > User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0 > Accept: application/json, text/plain, */* > Accept-Language: de,en-US;q=0.9,en;q=0.8 > Accept-Encoding: gzip, deflate, br, zstd > Content-Type: application/json > X-CSRF-Token: x-csrf-protection > Content-Length: 68 > Origin: https://pangolin.domain.tld > Sec-GPC: 1 > Connection: keep-alive > Referer: https://pangolin.domain.tld/invite?token=jBhjTKkhJ0-zGhOhFmH7cdObDrHmAimjT956BaTpAZv&email=pangolintest%40mail.domain.tld > Sec-Fetch-Dest: empty > Sec-Fetch-Mode: cors > Sec-Fetch-Site: same-origin > TE: trailers ==> `{"inviteId":"jBhjTKkhJ0","token":"zGhOhFmH7cdObDrHmAimjT956BaTpAZv"}` In the docker logs for Pangolin there weren't any output. For Traefik and Gerbil I couldn't find anything relevant in the Docker logs. Maybe it helps a little bit. :)
Author
Owner

@oschwartz10612 commented on GitHub (Feb 26, 2026):

Does it work in a different browser or if you clear your browser cache?

<!-- gh-comment-id:3968486364 --> @oschwartz10612 commented on GitHub (Feb 26, 2026): Does it work in a different browser or if you clear your browser cache?
Author
Owner

@aarhor commented on GitHub (Feb 26, 2026):

No. With Chrome, Edge and Firefox (all newest Version and in incognito mode) I get the same response like before.

<!-- gh-comment-id:3968801701 --> @aarhor commented on GitHub (Feb 26, 2026): No. With Chrome, Edge and Firefox (all newest Version and in incognito mode) I get the same response like before.
Author
Owner

@chris100pher commented on GitHub (Feb 28, 2026):

I found solution for me.
I am getting same error 400 - however the issue in my case was caused by error catching middleware configured in traefik dynamic config file:
http:
middlewares:
errory:
errors:
status:
- "400-405"
- "410-599"
service: error-service
query: "/{status}.html"

When I changed confirguration to not catch Error 400 system works as desired - goes to next screen allowing user to fill in and create password.

New dynamic config is as below:

http:
middlewares:
errory:
errors:
status:
- "401-405"
- "410-599"
service: error-service
query: "/{status}.html"

<!-- gh-comment-id:3977012793 --> @chris100pher commented on GitHub (Feb 28, 2026): I found solution for me. I am getting same error 400 - however the issue in my case was caused by error catching middleware configured in traefik dynamic config file: http: middlewares: errory: errors: status: **- "400-405"** - "410-599" service: error-service query: "/{status}.html" When I changed confirguration to not catch Error 400 system works as desired - goes to next screen allowing user to fill in and create password. New dynamic config is as below: http: middlewares: errory: errors: status: **- "401-405"** - "410-599" service: error-service query: "/{status}.html"
Author
Owner

@aarhor commented on GitHub (Feb 28, 2026):

The workaround also worked for me, but still geting the 400 when I look in the console. So, maybe an error in Traefik?

<!-- gh-comment-id:3977200534 --> @aarhor commented on GitHub (Feb 28, 2026): The workaround also worked for me, but still geting the 400 when I look in the console. So, maybe an error in Traefik?
Author
Owner

@LaurenceJJones commented on GitHub (Mar 1, 2026):

We should definitely fix the 400 response, the only thing im puzzled by is the errory middle ware that been setup is not default provided by pangolin installer?

cause that middleware intercepts a response and returns a generic page instead of pangolins response.

<!-- gh-comment-id:3979428014 --> @LaurenceJJones commented on GitHub (Mar 1, 2026): We should definitely fix the 400 response, the only thing im puzzled by is the `errory` middle ware that been setup is not default provided by pangolin installer? cause that middleware intercepts a response and returns a generic page instead of pangolins response.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#2166