Skip to main content

Resend Activation Email (Admin)

POST 
/company/auth/activate

Endpoint for a manager to resend the activation email to a user.

Allow managers/administrators to resend the activation email to registered users who have not received it or whose token has expired.

Use Cases​

  • User did not receive the activation email after registration
  • The activation email went to spam or promotions folder
  • The previous token expired and a new one is needed
  • Administrator resends activation to a specific user

Process Flow​

  1. Client requests email resend via user ID or email
  2. Middleware m.isGestor verifies the user has a manager/admin/dev role (401 if not)
  3. Server searches for the user by the provided ID or email
  4. If the user exists and is not active, a new token is generated
  5. If the user is already active, a notification can be sent but no reactivation occurs
  6. An activation email with the new token is sent
  7. Confirmation of sending is returned to the client
  8. For security, it is not revealed whether the email exists when not found

Security​

  • A new token is generated for security
  • Requires management permissions (manager, admin, or dev role)
  • Does not reveal if the user exists (for security)
  • Requires ID or email parameter (at least one)
  • The previous token is invalidated upon the new send

Request​

Responses​

Activation email resent