Activate an invited account in one call

post

https://api.qfp.quantnetwork.net/api/auth/activate

Collapses login-then-challenge into a single request: the temporary
password from the invitation email authenticates, and the chosen
password answers the NEW_PASSWORD_REQUIRED challenge that comes
back. Anything but that challenge (tokens included, meaning the
temporary password was already replaced) is 401 Invalid credentials.

On success the platform row is set to ACTIVE, on the same terms as
POST /api/auth/new-password, and the temporary password is spent.

Responses

200The issued tokens.

400The request body or parameters failed validation. A field violation reads Invalid Request parameter. {field}; unreadable JSON reads Malformed JSON request.

401The temporary password was wrong, the account was not awaiting a new password, or the account has no platform user or no tenant. Always Invalid credentials.

500The Cognito integration is disabled, or Cognito returned no authentication result.