auth

Request an API key recovery code

Sends a single-use recovery code to the account's email address. Your current API key keeps working — nothing is rotated until the code is redeemed at /v1/auth/recover/confirm. The response body and status are identical whether or not an account exists. Response TIMING is not equalised, so this is not a constant-time oracle.

post/v1/auth/recover

Request

  • Base URL: https://api.strale.io
  • URL: https://api.strale.io/v1/auth/recover
  • Auth: none declared

Request body

emailstring email required

Response

Accepted (whether or not an account exists)

messagestring
expires_in_minutesinteger

Example response

{
  "expires_in_minutes": 30
}

Changes

No recorded changes to this operation across all 1 revision of this API.