Email Templates

Auris sends transactional emails for authentication and account events: email verification, password resets, magic link logins, invitations, security alerts, and more. The Console provides a built-in template editor that lets you customize the subject, content, and design of every email type — per language — without writing code.

Access the template editor via Console -> Settings -> Email Templates.

Template Types

Auris includes thirteen transactional email templates, each triggered by a specific event:

Template Type	Trigger
`verification`	A new user registers and must verify their email address
`password_reset`	A user requests a password reset
`invitation`	A user is invited to join a tenant
`mfa_code`	Email-based two-factor authentication sends a verification code
`magic_link`	A user requests a passwordless login via magic link
`login_alert`	A new login is detected on the account
`welcome`	A user successfully verifies their email address
`password_changed`	A user’s password is changed (confirmation notice)
`account_locked`	An account is locked after too many failed login attempts
`suspicious_login`	A login from an unusual location, device, or IP is detected
`email_changed`	The primary email is changed (sent to the old address)
`license_issued`	A license key is issued to a customer
`ciba`	An application requests sign-in approval via the CIBA (backchannel) flow

Each template can be edited independently, in each language. Changes apply to all applications within the tenant.

If you have not customized a template, Auris uses a default template rendered with your tenant branding (company name, logo, primary color — see Branding). Customizing a template replaces the default HTML entirely for that type and language.

The magic_link email contains two buttons: a primary sign-in link that logs the user in on the device that opens the email, and a secondary approve link that confirms the session on the device that started the login flow.

Using the Template Editor

Select a template type

Open Settings -> Email Templates and click on the template you want to customize.

Choose an editing mode

The editor offers three modes:

Theme editor — adjust identity (logo, brand name, footer text), colors, typography, button style, layout, and the body content without touching full HTML.
Visual builder — compose the email from blocks on a canvas.
Code editor — edit the raw HTML and CSS directly. A snippet library provides ready-made starting points.

Edit the subject and body

The subject line and the body both support {{variable}} placeholders. In the body, click a variable chip to insert it at the cursor position — the editor lists exactly the variables available for the selected template type.

Manage languages

Each template can have a separate version per language. Five languages ship with built-in default templates: English, Italian, French, German, and Spanish. You can add any other locale code (for example pt-BR) from the language picker; locales without a built-in default fall back to English until you save a custom version.

At send time Auris resolves the template in this order: custom template in the user’s locale -> custom template in English -> built-in default in the user’s locale -> built-in default in English.

Preview the rendered email

The live preview renders your template with sample data as you edit. Use the device toggle to check desktop, tablet, and mobile layouts, or open the fullscreen preview.

Send a test email

Click Send Test. Auris renders the template with sample data and sends it to your own email address (the authenticated admin). The subject is prefixed with [TEST] so it is easy to distinguish from real transactional mail.

Save the template

Click Save to persist your changes. The template takes effect immediately for all future emails of that type and language. Use Reset to default to delete the custom version for the current language and revert to the built-in template.

Email clients have inconsistent HTML and CSS support. Use inline CSS and table-based layouts for complex structures, and send test emails to real clients before saving production templates. Saved HTML is sanitized on the server (scripts, event handlers, and embedded frames are stripped) and limited to 500 KB.

Template Variables

Global Variables

These date variables are auto-injected into every template render:

Variable	Description	Example Value
`{{year}}`	Current year	`2026`
`{{month}}`	Current month (two digits)	`07`
`{{day}}`	Current day of month (two digits)	`23`
`{{date}}`	Current date in `YYYY-MM-DD` format	`2026-07-23`

Per-Template Variables

Each template type has its own set of variables:

Template	Variables
`verification`	`email`, `link`, `expiresIn`
`password_reset`	`email`, `link`, `expiresIn`
`invitation`	`email`, `orgName`, `role`, `inviterEmail`, `link`, `expiresIn`
`mfa_code`	`email`, `code`, `expiresIn`
`magic_link`	`email`, `link`, `approveLink`, `expiresIn`, `tenantName`
`login_alert`	`email`, `device`, `ipAddress`, `location`, `time`
`welcome`	`email`, `name`, `orgName`, `dashboardLink`
`password_changed`	`email`, `name`, `time`, `ipAddress`
`account_locked`	`email`, `name`, `lockDuration`, `attempts`, `ipAddress`, `time`
`suspicious_login`	`email`, `name`, `device`, `ipAddress`, `location`, `time`, `reason`
`email_changed`	`email`, `name`, `newEmail`, `time`
`license_issued`	`key`, `jwtToken`, `product`, `expiresAt`, `features`
`ciba`	`email`, `appName`, `bindingMessage`, `approveUrl`, `denyUrl`

Template Syntax

{{variable}} — replaced with the value, HTML-escaped for safety. In the subject line (plain text, not HTML) values are inserted without escaping.
{{{variable}}} — raw interpolation without HTML escaping. Only use for trusted, server-built HTML fragments.
{{#if variable}}...{{/if}} — the enclosed content is kept only when the variable resolves to a non-empty value. Useful for optional elements like the approveLink button in magic_link.

There is no dot notation ({{user.name}} is not supported) and no loops. Variable names are case-sensitive.

Unknown placeholders are left as-is in the rendered output. If a sent email contains literal {{text}}, check the variable name against the table above.

Email Delivery and Footer

Auris sends emails through the SMTP configuration of your tenant when one is present and active; otherwise the platform default sender is used. SMTP settings, a connection test, and the email footer options live at Console -> Settings -> Email:

White-label emails — removes the “Powered by Altovar” attribution from the footer of default templates.
Hide footer — omits the footer band entirely.

These toggles apply to the default (non-custom) templates; a custom template replaces the whole HTML, footer included. See Branding for details.

API Reference

Email templates can also be managed programmatically via the REST API. See the Email Templates API for full request and response details.

GET/api/email-templates

GET/api/email-templates/{type}

PUT/api/email-templates/{type}

DELETE/api/email-templates/{type}

POST/api/email-templates/{type}/preview

POST/api/email-templates/{type}/test

Permissions

Permission	Description
`manage:security`	Required to list, view, edit, delete, preview, and test email templates.

Customizing Email Templates — Step-by-step template customization guide
Email Templates API — Programmatic template management
Branding Configuration — Logo, colors, white-label email footer
Magic Link Login — Technical reference for magic link authentication