stage/invitation: Send invite via email UI by melizeche · Pull Request #19823 · goauthentik/authentik

melizeche · 2026-01-28T23:45:51Z

Details

Adds the ability to send invitation links directly via email from the Admin UI, eliminating the need to manually copy and share invitation URLs.

LAST:

Checklist

Local tests pass (ak test authentik/)
The code has been formatted (make lint-fix)

If an API change has been made

The API schema has been updated (make gen-build)

If changes to the frontend have been made

The code has been formatted (make web)

If applicable

The documentation has been updated
The documentation has been formatted (make docs)

netlify · 2026-01-28T23:47:16Z

✅ Deploy Preview for authentik-storybook ready!

Name	Link
🔨 Latest commit	`e519d70`
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-storybook/deploys/698a6aaf241d6100088c9fa0
😎 Deploy Preview	https://deploy-preview-19823--authentik-storybook.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

netlify · 2026-01-28T23:47:37Z

✅ Deploy Preview for authentik-docs ready!

Name	Link
🔨 Latest commit	`e519d70`
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-docs/deploys/698a6aaf7ea93100086aeacd
😎 Deploy Preview	https://deploy-preview-19823--authentik-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

authentik/stages/invitation/api.py

codecov · 2026-01-28T23:53:32Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.23%. Comparing base (9693eed) to head (e519d70).
⚠️ Report is 68 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #19823      +/-   ##
==========================================
- Coverage   93.24%   93.23%   -0.01%     
==========================================
  Files         968      968              
  Lines       53616    53692      +76     
==========================================
+ Hits        49994    50061      +67     
- Misses       3622     3631       +9

Flag	Coverage Δ
conformance	`37.93% <23.07%> (-0.03%)`	⬇️
e2e	`43.90% <23.07%> (-0.03%)`	⬇️
integration	`22.69% <1.28%> (-0.03%)`	⬇️
unit	`91.41% <100.00%> (+0.03%)`	⬆️
unit-migrate	`91.43% <100.00%> (+0.01%)`	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

github-actions · 2026-01-29T00:17:10Z

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-e519d70f69d7ba37d69e9a5550104c9c972c622d
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-e519d70f69d7ba37d69e9a5550104c9c972c622d

Afterwards, run the upgrade commands from the latest release notes.

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

netlify · 2026-02-04T16:23:49Z

✅ Deploy Preview for authentik-integrations ready!

Name	Link
🔨 Latest commit	`e519d70`
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-integrations/deploys/698a6aafc6de8c0008b6f094
😎 Deploy Preview	https://deploy-preview-19823--authentik-integrations.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

dewi-tik

Minor nits

web/src/admin/stages/invitation/InvitationSendEmailForm.ts

website/docs/users-sources/user/invitations.md

kensternberg-authentik

The front-end code is straightforward and looks correct. I made recommendations which you can choose to implement or not.

web/src/admin/stages/invitation/InvitationListLink.ts

web/src/admin/stages/invitation/InvitationSendEmailForm.ts

Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Signed-off-by: Marcelo Elizeche Landó <marce@melizeche.com>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

BeryJu

LGTM, ready to merge after addressing @kensternberg-authentik's comments

…p-v3 * main: (105 commits) website/docs: Custom CSS (#19991) core: bump goauthentik.io/api/v3 to 3.2026.5.0-rc1-1770992049 (#20285) stage/invitation: Send invite via email UI (#19823) root: remove unused `django-cte` (#20090) core: bump ruff from 0.15.0 to 0.15.1 (#20273) core, web: update translations (#20271) ci: bump docker/build-push-action from 6.19.1 to 6.19.2 (#20274) enterprise/lifecycle: fix multiple reviews showing up in "Reviews" when the user is a member of multiple reviewer groups (#20266) ci: fix binary outpost build on release (#20248) web: add pretty names for lifecycle review events in event logs (#20264) web: fix italic formatting in lifecycle rule help text (#20263) website/docs: 2025.8.6 release notes (#20243) website/docs: 2025.12.4 release notes (#20226) website/docs: 2025.10.4 release notes (#20242) security: CVE-2026-25748 (#20240) security: CVE-2026-25922 (#20241) security: CVE-2026-25227 (#20239) ci: fix release testing (#20207) core: Apply CSpell corrections. (#20191) core: bump goauthentik.io/api/v3 to 3.2026.5.0-rc1-1770842608 (#20213) ...

…web/flow/tablize-token-component-relationship * web/flow/tablize-token-component-relationship-v3: (75 commits) Removed the cache; it's extra code for no benefit whatsoever; the table is constructed ONCE at start-up, there's never going to be a cache hit. The FlowExecutorStageFactory produces StageMappings (StageMapping[]), which is itself a warehouse of singular server-component -> client-component relationships, fetching the client from the bundle as needed. The StageMapping only does the fetch once per instance, so (for example) a password failure will reinstantiate a PasswordStage, but it will not fetch it a second time. Tidy. website/docs: Custom CSS (#19991) core: bump goauthentik.io/api/v3 to 3.2026.5.0-rc1-1770992049 (#20285) stage/invitation: Send invite via email UI (#19823) root: remove unused `django-cte` (#20090) core: bump ruff from 0.15.0 to 0.15.1 (#20273) core, web: update translations (#20271) ci: bump docker/build-push-action from 6.19.1 to 6.19.2 (#20274) enterprise/lifecycle: fix multiple reviews showing up in "Reviews" when the user is a member of multiple reviewer groups (#20266) ci: fix binary outpost build on release (#20248) web: add pretty names for lifecycle review events in event logs (#20264) web: fix italic formatting in lifecycle rule help text (#20263) website/docs: 2025.8.6 release notes (#20243) website/docs: 2025.12.4 release notes (#20226) website/docs: 2025.10.4 release notes (#20242) security: CVE-2026-25748 (#20240) security: CVE-2026-25922 (#20241) security: CVE-2026-25227 (#20239) ci: fix release testing (#20207) ...

…/flow/20030-one-true-api * web/flow/tablize-token-component-relationship: (76 commits) Removed comments about the cache. Added comments about where to find the FlowExecutor stage table. Moved the import of WebAuthnAuthenticticatorRegisterState from FlowExecutor.ts to FlowExecutorStages.ts; both files are bundled together, so this is a no-op functionally, but it's easier to confirm that StageEntries without import expressions (STageModuleCallbacks) have their stages bundled (pre-imported) if the import statement is in the same file. Removed the cache; it's extra code for no benefit whatsoever; the table is constructed ONCE at start-up, there's never going to be a cache hit. The FlowExecutorStageFactory produces StageMappings (StageMapping[]), which is itself a warehouse of singular server-component -> client-component relationships, fetching the client from the bundle as needed. The StageMapping only does the fetch once per instance, so (for example) a password failure will reinstantiate a PasswordStage, but it will not fetch it a second time. Tidy. website/docs: Custom CSS (#19991) core: bump goauthentik.io/api/v3 to 3.2026.5.0-rc1-1770992049 (#20285) stage/invitation: Send invite via email UI (#19823) root: remove unused `django-cte` (#20090) core: bump ruff from 0.15.0 to 0.15.1 (#20273) core, web: update translations (#20271) ci: bump docker/build-push-action from 6.19.1 to 6.19.2 (#20274) enterprise/lifecycle: fix multiple reviews showing up in "Reviews" when the user is a member of multiple reviewer groups (#20266) ci: fix binary outpost build on release (#20248) web: add pretty names for lifecycle review events in event logs (#20264) web: fix italic formatting in lifecycle rule help text (#20263) website/docs: 2025.8.6 release notes (#20243) website/docs: 2025.12.4 release notes (#20226) website/docs: 2025.10.4 release notes (#20242) security: CVE-2026-25748 (#20240) security: CVE-2026-25922 (#20241) security: CVE-2026-25227 (#20239) ...

…t-flow-inspector * web/flow/20030-one-true-api: Removed comments about the cache. Added comments about where to find the FlowExecutor stage table. Moved the import of WebAuthnAuthenticticatorRegisterState from FlowExecutor.ts to FlowExecutorStages.ts; both files are bundled together, so this is a no-op functionally, but it's easier to confirm that StageEntries without import expressions (STageModuleCallbacks) have their stages bundled (pre-imported) if the import statement is in the same file. Removed the cache; it's extra code for no benefit whatsoever; the table is constructed ONCE at start-up, there's never going to be a cache hit. The FlowExecutorStageFactory produces StageMappings (StageMapping[]), which is itself a warehouse of singular server-component -> client-component relationships, fetching the client from the bundle as needed. The StageMapping only does the fetch once per instance, so (for example) a password failure will reinstantiate a PasswordStage, but it will not fetch it a second time. Tidy. website/docs: Custom CSS (#19991) core: bump goauthentik.io/api/v3 to 3.2026.5.0-rc1-1770992049 (#20285) stage/invitation: Send invite via email UI (#19823) root: remove unused `django-cte` (#20090) core: bump ruff from 0.15.0 to 0.15.1 (#20273) core, web: update translations (#20271) ci: bump docker/build-push-action from 6.19.1 to 6.19.2 (#20274) enterprise/lifecycle: fix multiple reviews showing up in "Reviews" when the user is a member of multiple reviewer groups (#20266) ci: fix binary outpost build on release (#20248) web: add pretty names for lifecycle review events in event logs (#20264) web: fix italic formatting in lifecycle rule help text (#20263) website/docs: 2025.8.6 release notes (#20243) web/flow: optimize table for type safety web: Flesh out module driven tag names.

…261-tidy-identification-stage * web/flow/20063-extract-flow-inspector: Move the inspector into its own folder. Since the check for `this.can(CapabilitiesEnum.CanDebug))` has been moved into the FlowInspectorButton, FlowExecutor no longer needs the capabilities check at all. Of COURSE prettier had opinions! Removed comments about the cache. Added comments about where to find the FlowExecutor stage table. Moved the import of WebAuthnAuthenticticatorRegisterState from FlowExecutor.ts to FlowExecutorStages.ts; both files are bundled together, so this is a no-op functionally, but it's easier to confirm that StageEntries without import expressions (STageModuleCallbacks) have their stages bundled (pre-imported) if the import statement is in the same file. Removed the cache; it's extra code for no benefit whatsoever; the table is constructed ONCE at start-up, there's never going to be a cache hit. The FlowExecutorStageFactory produces StageMappings (StageMapping[]), which is itself a warehouse of singular server-component -> client-component relationships, fetching the client from the bundle as needed. The StageMapping only does the fetch once per instance, so (for example) a password failure will reinstantiate a PasswordStage, but it will not fetch it a second time. Tidy. website/docs: Custom CSS (#19991) core: bump goauthentik.io/api/v3 to 3.2026.5.0-rc1-1770992049 (#20285) stage/invitation: Send invite via email UI (#19823) root: remove unused `django-cte` (#20090) core: bump ruff from 0.15.0 to 0.15.1 (#20273) core, web: update translations (#20271) ci: bump docker/build-push-action from 6.19.1 to 6.19.2 (#20274) enterprise/lifecycle: fix multiple reviews showing up in "Reviews" when the user is a member of multiple reviewer groups (#20266) ci: fix binary outpost build on release (#20248) web: add pretty names for lifecycle review events in event logs (#20264) web: fix italic formatting in lifecycle rule help text (#20263) website/docs: 2025.8.6 release notes (#20243) web/flow: optimize table for type safety web: Flesh out module driven tag names.

melizeche added 6 commits January 28, 2026 18:57

first approach

33a4aac

Merge branch 'main' into send_invite_ui

0cfc540

add cc and bcc support, better ui

ceb202d

remove unnecessary data return

345ad14

add template support

ce928c4

fix linting

b7c3a69

github-advanced-security bot found potential problems Jan 28, 2026

View reviewed changes

authentik/stages/invitation/api.py Fixed Show fixed Hide fixed

melizeche marked this pull request as ready for review February 2, 2026 15:03

melizeche requested review from a team as code owners February 2, 2026 15:03

BeryJu added 2 commits February 4, 2026 16:45

Merge branch 'main' into send_invite_ui

22b18a1

do the ui

c9c76e5

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

melizeche added 6 commits February 5, 2026 01:39

display invite info in InvitationSendEmailForm.ts

074c8c1

Select the invitation template by default

2453063

Fix linting

feeb086

fix tests

b0e46f5

Add tests, clean code

046b887

Add docs

a359291

melizeche requested a review from a team as a code owner February 5, 2026 17:32

melizeche added 3 commits February 5, 2026 14:51

fix link

177b10f

Make the UI less disgusting

4f5adc7

Make the UI less disgusting

fee038c

dewi-tik requested changes Feb 6, 2026

View reviewed changes

kensternberg-authentik approved these changes Feb 6, 2026

View reviewed changes

web/src/admin/stages/invitation/InvitationListLink.ts Show resolved Hide resolved

web/src/admin/stages/invitation/InvitationSendEmailForm.ts Outdated Show resolved Hide resolved

web/src/admin/stages/invitation/InvitationSendEmailForm.ts Outdated Show resolved Hide resolved

Apply suggestions from code review

f119d3c

Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Signed-off-by: Marcelo Elizeche Landó <marce@melizeche.com>

Merge branch 'main' into send_invite_ui

05480b5

melizeche requested a review from dewi-tik February 6, 2026 17:15

small formatting fix

1ba0ac7

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

BeryJu approved these changes Feb 9, 2026

View reviewed changes

melizeche added 2 commits February 9, 2026 19:42

Merge branch 'main' into send_invite_ui

a83b203

Use writeToClipboard function, better wording for CC and BCC

e519d70

dewi-tik approved these changes Feb 10, 2026

View reviewed changes

melizeche merged commit b76539e into main Feb 13, 2026
102 checks passed

melizeche deleted the send_invite_ui branch February 13, 2026 14:00

melizeche self-assigned this Feb 16, 2026

melizeche added this to authentik Core Feb 16, 2026

github-project-automation bot moved this to Todo in authentik Core Feb 16, 2026

github-project-automation bot moved this from Todo to Done in authentik Core Feb 16, 2026

melizeche mentioned this pull request Feb 16, 2026

Send welcome mail to newly created users #2758

Open

Uh oh!

Conversation

melizeche commented Jan 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Details

Checklist

Uh oh!

netlify bot commented Jan 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for authentik-storybook ready!

Uh oh!

netlify bot commented Jan 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for authentik-docs ready!

Uh oh!

Uh oh!

codecov bot commented Jan 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions bot commented Jan 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

netlify bot commented Feb 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for authentik-integrations ready!

Uh oh!

dewi-tik left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

kensternberg-authentik left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

BeryJu left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

melizeche commented Jan 28, 2026 •

edited

Loading

netlify bot commented Jan 28, 2026 •

edited

Loading

netlify bot commented Jan 28, 2026 •

edited

Loading

codecov bot commented Jan 28, 2026 •

edited

Loading

github-actions bot commented Jan 29, 2026 •

edited

Loading

netlify bot commented Feb 4, 2026 •

edited

Loading