Emails, limits and timeouts
Emails Orbit sends
| Email |
Sent when |
Contains |
Link valid for |
| Password reset |
Forgot password?, or an admin's Email reset link |
Link to APP_BASE_URL/reset-password?token=… |
Limited; request a new one if expired |
| Two-step code |
Sign-in with two-step verification; enrolling a method |
6-digit code |
10 minutes (MFA_CHALLENGE_TTL_SECONDS) |
| Invitation |
Admin → Users → Add user → Send an email invite |
Sign-up link |
72 hours (INVITE_TOKEN_TTL_HOURS) |
| Confirm your application / registration |
A guest submits on the public portal |
Link to PUBLIC_PORTAL_BASE_URL/confirm/<tenant>/<token> |
72 hours (PUBLIC_SUBMISSION_CONFIRM_TTL_HOURS) |
| Report |
Send report, or a schedule |
Attachments (CSV/XLSX/PDF) or sign-in links |
– |
Without SMTP the messages are written to the API log. See Configuration.
Limits
| Limit |
Value |
| Password length |
At least 8 characters (superadmins 12) |
| Two-step code attempts |
5 per code |
| Recovery codes |
8, single use |
| List page size |
1–200 rows per API page |
| Staff document uploads |
25 MB by default (Settings → Documents) |
| Portal resume upload |
PDF/DOC/DOCX, 5 MB |
| Report email recipients |
10 |
| NOC codes per posting |
3; NAICS per employer: 3; career interests per client: 10 |
| Scheduler and conflict window |
366 days |
| Import processing |
Batches of 100 rows |
Public portal rate limits (per visitor IP, per minute)
| Action |
Limit |
| Job applications |
10 |
| Event registrations |
10 |
| Resume uploads |
5 |
| Confirmation links |
20 |
Sessions
| Item |
Default |
| Access token |
30 minutes, refreshed silently |
| Session (refresh token) |
14 days |
View Markdown source