---
title: "Export Account"
method: POST
path: "/auth/export"
---

# Export Account

`POST /auth/export`

## Request

- Base URL: `https://safefamilyapp.com` (the document declares no server; this is the origin it was published from)
- URL: `https://safefamilyapp.com/auth/export`
- Auth: HTTP bearer

Everything OTRI holds for this account, as a JSON download (PRIVACY.md, 'Your rights').

Asks for the password, like every other account action that matters. This was the one that did
not, and it is the one worth the most: in a single request it hands over the account, its
consents, and every result row the organizer ever uploaded -- each with a runner's name,
gender, year of birth and nationality. A session on its own should not be able to take all of
that, because a session is what an attacker has.

## Request body

- PasswordConfirm
  - `password` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/safefamilyapp/apis/otri-api.md) · [All operations](https://skmtc.dev/safefamilyapp/apis/otri-api/llms.txt) · [OpenAPI document](https://skmtc.dev/safefamilyapp/apis/otri-api/revisions/d07bb03cb836?raw)