Skip to main content
POST
Reveal a wallet recovery secret/TOTP, gated by a fresh reauth proof

Autorisierungen

Authorization
string
header
erforderlich

OIDC/JWKS bearer token. Self-hosted defaults to Pocket ID; SaaS uses Auth0 through the edge. PocketBase JWT is legacy migration compatibility only.

Pfadparameter

id
string
erforderlich

Resource ID

Body

application/json

Reveal request gated by a fresh trusted-reauth HMAC proof. The timestamp/signature may instead be supplied via the X-Kombify-Reauth-* / X-TechStack-Reauth-* request headers.

reauth_timestamp
string
erforderlich
reauth_signature
string
erforderlich
reason
string
reauth_assertion
string
platform_reauth_at
string

Antwort

Revealed recovery values.

Standard success envelope; data is the revealed recovery values.

data
object

One-time plaintext recovery values. secret and totp are omitted when the corresponding stored value is empty.

meta
object