# Group Invitations

API endpoints for managing group invitations. Group owners and admins can invite users to join their groups. Invitees can accept or reject invitations. Creating invitations requires the GroupMembers.Invite RBAC permission. Accepting, rejecting, and viewing personal invitations require standard authentication.

## List current user's group invitations

 - [GET /api/v1/groups/invites](https://docs.wellesley.social/openapi/group-invitations/paths/~1api~1v1~1groups~1invites/get.md): Returns a paginated list of all group invitations addressed to the authenticated user, optionally filtered by status. Authentication is required.

## Get current user's invitation for a group

 - [GET /api/v1/groups/{groupId}/invite](https://docs.wellesley.social/openapi/group-invitations/paths/~1api~1v1~1groups~1%7Bgroupid%7D~1invite/get.md): Retrieves the invitation for the authenticated user in the specified group, regardless of status. Returns 404 if no invitation exists. Authentication is required.

## List invitations for a group

 - [GET /api/v1/groups/{groupId}/invites](https://docs.wellesley.social/openapi/group-invitations/paths/~1api~1v1~1groups~1%7Bgroupid%7D~1invites/get.md): Returns a paginated list of invitations for the specified group, optionally filtered by status. Requires the GroupMembers.Invite RBAC permission (group admin/owner). Authentication is required.

RBAC: requires GroupMembers.Invite

## Invite a user to join a group

 - [POST /api/v1/groups/{groupId}/invites](https://docs.wellesley.social/openapi/group-invitations/paths/~1api~1v1~1groups~1%7Bgroupid%7D~1invites/post.md): Creates an invitation for a user to join the group. Only group owners and admins can create invitations.
            The invitee must not already be a member of the group or have a pending invitation.
            Exactly one of inviteeId or inviteeEmail must be provided.

            The response contains the created invite and an emailSent flag indicating whether
            an invitation email was sent from this server (false for remote users, whose home server sends the email).

RBAC: requires GroupMembers.Invite

## Accept invitation to a group

 - [POST /api/v1/groups/{groupId}/invites/accept](https://docs.wellesley.social/openapi/group-invitations/paths/~1api~1v1~1groups~1%7Bgroupid%7D~1invites~1accept/post.md): Accepts an invitation to join a local group. The user becomes a member with the VIEWER role.
            The pending invite is looked up by (groupId, authenticated user).

            Note: This endpoint is for local groups only. For remote (federated) groups, invite records
            are not stored locally - the client should call the remote server directly with a GroupFederationToken.

## Reject invitation to a group

 - [POST /api/v1/groups/{groupId}/invites/reject](https://docs.wellesley.social/openapi/group-invitations/paths/~1api~1v1~1groups~1%7Bgroupid%7D~1invites~1reject/post.md): Rejects an invitation to join a local group. The invitation status will be updated to REJECTED.
            The pending invite is looked up by (groupId, authenticated user).

            Note: This endpoint is for local groups only. For remote (federated) groups, invite records
            are not stored locally - the client should call the remote server directly with a GroupFederationToken.

## Cancel a group invitation

 - [DELETE /api/v1/groups/{groupId}/invites/{groupInviteId}](https://docs.wellesley.social/openapi/group-invitations/paths/~1api~1v1~1groups~1%7Bgroupid%7D~1invites~1%7Bgroupinviteid%7D/delete.md): Requires GroupMembers.Invite permission (group owner/admin). The invitation must be in PENDING status.

RBAC: requires GroupMembers.Invite