[2026-10-30] Added: New endpoints regarding user invitations

v1/employments/{id}/accept_invitation (POST)

Change: New endpoint to accept, as the invited user, the invitation to an additional company. This requires the id of the user's employment in the new company.
(Note: The user can accept the invitation even if they refused it before.)

v1/employments/{id}/ignore_invitation (POST)

Change: New endpoint to refuse, as the invited user, the invitation to an additional company. After that, no pop-up modal will show to ask the user whether they want to accept the invitation. The use of this endpoint requires the id of the user's employment in the new company.
(Note: The user can accept the invitation even after they refused it, see above.)

v1/users/accept_invitation (PATCH)

Change: New endpoint to accept the invitation of a new user to their first company by setting up an initial login password - this requires that the invitation token (from invitation e-mail) be included in the request.

v1/users/password_resets (POST)

Change: New endpoint to change the login password - this requires that the password reset token (from reset e-mail) be included in the request.

v1/users/open_invitations (GET)

Change: New endpoint to list the open (not expired, and not accepted) invitations for the user

v1/users/password_policy (GET)

Change: New endpoint to query the minimum requirements for a new password for this user. For each category (e.g. "number of capital letters"), this shows the maximum number required by any company account where the user has an employment.