Skip to main content
POST
Reveal a wallet recovery secret/TOTP, gated by a fresh reauth proof

Autorizaciones

Authorization
string
header
requerido

OIDC/JWKS bearer token. Self-hosted defaults to Pocket ID; SaaS uses Auth0 through the edge. PocketBase JWT is legacy migration compatibility only.

Parámetros de ruta

id
string
requerido

Resource ID

Cuerpo

application/json

Reveal request gated by a fresh trusted-reauth HMAC proof. The timestamp/signature may instead be supplied via the X-Kombify-Reauth-* / X-TechStack-Reauth-* request headers.

reauth_timestamp
string
requerido
reauth_signature
string
requerido
reason
string
reauth_assertion
string
platform_reauth_at
string

Respuesta

Revealed recovery values.

Standard success envelope; data is the revealed recovery values.

data
object

One-time plaintext recovery values. secret and totp are omitted when the corresponding stored value is empty.

meta
object