send-magic-link: The request could not be understood.

[luckow]

App package bug?

Similar behaviour on all instances.

Ghost app package: org.ghost.cloudronapp2@4.205.1

Oct 28 17:39:15 [2026-10-28 16:39:15] ERROR "POST /members/api/send-magic-link/" 400 3ms
Oct 28 17:39:15 
Oct 28 17:39:15 The request could not be understood.
Oct 28 17:39:15 2026-10-28T17:39:15+01:00 
Oct 28 17:39:15 Error ID:
Oct 28 17:39:15 7b4bd747-39c6-2sed-9873-45b34343cb09
Oct 28 17:39:15 2026-10-28T17:39:15+01:00 
Oct 28 17:39:15 ----------------------------------------
Oct 28 17:39:15 2026-10-28T17:39:15+01:00 
Oct 28 17:39:15 BadRequestError: The request could not be understood.
Oct 28 17:39:15 at verifyIntegrityToken (/home/cloudron/ghost/versions/6.72.0/core/server/services/members/middleware.js:332:15)
Oct 28 17:39:15 at Layer.handle [as handle_request] (/home/cloudron/ghost/versions/6.72.0/node_modules/.pnpm/express@4.22.3_supports-color@10.2.2/node_modules/express/lib/router/layer.js:95:5)
Oct 28 17:39:15 at next (/home/cloudron/ghost/versions/6.72.0/node_modules/.pnpm/express@4.22.3_supports-color@10.2.2/node_modules/express/lib/router/route.js:149:13)
Oct 28 17:39:15 at /home/cloudron/ghost/versions/6.72.0/node_modules/.pnpm/body-parser@1.20.8_supports-color@10.2.2/node_modules/body-parser/lib/read.js:137:5
Oct 28 17:39:15 at AsyncResource.runInAsyncScope (node:async_hooks:227:14)
Oct 28 17:39:15 at invokeCallback (/home/cloudron/ghost/versions/6.72.0/node_modules/.pnpm/raw-body@2.5.3/node_modules/raw-body/index.js:238:16)
Oct 28 17:39:15 at done (/home/cloudron/ghost/versions/6.72.0/node_modules/.pnpm/raw-body@2.5.3/node_modules/raw-body/index.js:227:7)
Oct 28 17:39:15 at IncomingMessage.onEnd (/home/cloudron/ghost/versions/6.72.0/node_modules/.pnpm/raw-body@2.5.3/node_modules/raw-body/index.js:287:7)
Oct 28 17:39:15 at IncomingMessage.emit (node:events:514:28)
Oct 28 17:39:15 at endReadableNT (node:internal/streams/readable:1783:12)
Oct 28 17:39:15 at process.processTicksAndRejections (node:internal/process/task_queues:90:21)

[jdaviescoates]

@luckow I guess related to this update 4 days ago https://forum.cloudron.io/topic/2415/ghost-package-updates/642

[james]

Hello @luckow

With the latest @ghost update we attempted to fix this issue https://forum.cloudron.io/topic/13773/mail-problems-on-ghost
Can you please check and report what is configured in your Ghost instances for the mail?
I also trying to reproduce this problem.

[james]

Hello @luckow

I could not reproduce it on 4.205.1: Portal sign-up works on a fresh install and after updating from 4.204.0.

The error, you posted, comes from Ghost's integrity token check (verifyIntegrityToken). Ghost returns it before any mail is sent, when the request has no integrity token or an invalid one. The mail change in 4.205.0 runs later, so it is likely not the cause.

Can you check:

1. The log line just before the error: Request with missing integrity token. or Request with invalid integrity token.?
2. Does the sign-up fail in the browser (Portal shows an error), or do you only see it in the logs? Requests without a token are often bots calling the endpoint directly.
3. Which theme do you use, and does it have a custom sign-up form or third-party script?