Onetimesecrets

What a recipient needs before trying a passphrase

Changed on

Auth: Anonymous - no token required.

Returns the key-derivation parameters for a secret and whether there is anything left to release. Deliberately NOT the ciphertext: knowing the salts alone gives an attacker nothing to work offline against. Anonymous by design — the recipient is usually not a Panoptic user.

get/OneTimeSecrets/{token}/Meta

Request

  • Base URL: https://api.tonbridge.school
  • URL: https://api.tonbridge.school/OneTimeSecrets/{token}/Meta
  • Auth: none declared

Path parameters

tokenstring required

Response

Success

existsboolean
burnedboolean
burnReasonstring nullable
viewedAtstring date-time nullable
expiresAtstring date-time nullable
attemptsRemaininginteger
encryptionSaltstring nullable
authSaltstring nullable
iterationsinteger
noncestring nullable
notestring nullable

Changes