Skip to main content
POST
Reveal a wallet recovery secret/TOTP, gated by a fresh reauth proof

Authorizations

Authorization
string
header
required

OIDC/JWKS bearer token. Self-hosted defaults to Pocket ID; SaaS uses Auth0 through the edge. PocketBase JWT is legacy migration compatibility only.

Path Parameters

id
string
required

Resource ID

Body

application/json

Reveal request gated by a fresh trusted-reauth HMAC proof. The timestamp/signature may instead be supplied via the X-Kombify-Reauth-* / X-TechStack-Reauth-* request headers.

reauth_timestamp
string
required
reauth_signature
string
required
reason
string
reauth_assertion
string
platform_reauth_at
string

Response

Revealed recovery values.

Standard success envelope; data is the revealed recovery values.

data
object

One-time plaintext recovery values. secret and totp are omitted when the corresponding stored value is empty.

meta
object