Activation and login
Expired activation links, "jwt malformed", and login API responses
Activation link doesn't work
Activation links are short-lived JWTs. If you click an old one, or click it twice, you'll see one of these:
jwt malformed: the link is corrupted or truncated (a mail client inserted a line break, or you copied only part of the URL).jwt expiredor an abort error on/auth/activate: the link has passed its lifetime.
Fix
- Request a new activation email from the login page.
- Copy the link directly from the email rather than typing it.
- Open it in the same browser you originally signed up in.
Login API returns 404 or 204
When you're not logged in, calls like GET /api/health or GET /auth/me
return 204 or 404 by design. That's how the frontend detects "no
session", and it is not an error.
On self-hosted Postiz: if you are logged in and still see 404 on these endpoints, your backend URL is misconfigured. See Login endpoints return 404.
No activation email arrived
Check spam, then request a new link from the login page. If nothing arrives, email support@postiz.com from the address you signed up with.