# User invites

Invite links connect a user account to a third-party identity (Apple,
Google, or Microsoft) for authentication into MyAleta.

Note: The Aleta API does NOT send the invite link to the user. The
caller must deliver the link via the channel of their choice — email,
chat, etc. — so they fully control branding and language.

## Endpoints

GET /v2/users/:id/invites
  List invites for a user (any state).

POST /v2/users/:id/invites
  Create a new invite for a user.

POST /v2/users/:id/invites/:inviteId/cancellation
  Cancel an outstanding invite.

## Path params

  id       (required) — User identifier (UUID).
  inviteId (required, only on cancellation) — Invite identifier.

## Attributes (`type: invite`)

  state                        (string) — valid | used | expired | cancelled.
  link                         (string) — The URL to send to the user.
  restrictedToIdentityProvider (string) — apple | google | microsoft | "" (any).
  restrictedToEmail            (string) — Email lock (defaults to the user's contactEmail).
  expiration                   (string, ISO 8601) — Defaults to 60 days after creation.

## Relationships

  user (required) — The user account the invite grants access to.