Signup fails with parsing invalid syntax error due to missing verificationCodeTimeout

I'm trying to get new user signup working... I have the email provider working, i get the verification code. I punch it in and get a 200 from the call to /api/signup with this response:

{
  "status": "error",
  "msg": " parsing \"\": invalid syntax",
  "sub": "",
  "name": "",
  "data": null,
  "data2": null,
  "data3": null
}

The request to /api/signup:

{
  "application": "demo-webapp",
  "organization": "demo",
  "name": "test_user",
  "password": "***",
  "email": "***@gmail.com",
  "emailCode": "23451"
}

I get the error regardless of whether or not the verification code is correct. I do have to first send a verification code, or I get an error saying the code hasn't been sent yet.

I see 0 logs indicating issues in my docker logs for casdoor. Any help would be greatly appreciated as I have no way to pinpoint what code is throwing this error.

If I "sign up" by logging in with another oauth provider, it seems to work. My user gets created.

Is there some way to enable more logging? I've tried LOG_LEVEL and GIN_MODE =debug. I still only get these logs:

2025-11-12 01:01:42.148877540    2025/11/12 01:01:42.148 [I]  (172.18.0.1) subOwner = anonymous, subName = anonymous, method = POST, urlPath = /api/signup, obj.Owner = , obj.Name = test_user, result = allow
2025-11-12 01:01:42.157340179    2025/11/12 01:01:42.156 [D]  |     172.18.0.1| 200 |  14.796358ms|   match| POST     /api/signup   r:/api/signup
2025-11-12 01:02:30.035893968    2025/11/12 01:02:30.035 [D]  |      127.0.0.1| 200 |   4.438202ms| nomatch| GET      /

can you provide the steps of the web UI instead? and what SMS vendor do you use? switch to another SMS vendor?

don't send API directly because you won't know if your args are right

I am not using SMS. I am using smtp2go for email.

Steps of web UI:

1. Click sign up
2. Enter display name, email, password, click send code
3. Receive code, enter that code in UI, click sign up
4. Error occurs.

don't send API directly because you won't know if your args are right
? I'm not sure what you mean here. I am not calling the API myself, I am just using the out-of-the-box casdoor UI.

I am very close to giving up on the product and pivoting to something else. Been struggling with this for a couple days now, all the AI credits in my account cannot figure it out either. Let me know what else you need to see. Do you need to see my account/signup items config?

I can confirm that if I remove the verification code requirement (just raw-dog email), signup works.

I am using the casbin/casdoor:latest image.

Rolled up my sleeves and figured it out. Was missing the verificationCodeTimeout config.

Now I’m wondering why I didn’t see a different error message… or why there isn’t a default value

default value is 0