Onetimesecrets

Take the one view

Changed on

Auth: Anonymous - no token required.

Checks the auth key derived from the passphrase and, on a match, returns the ciphertext exactly once and destroys it. A wrong passphrase costs an attempt but does NOT spend the view; running out of attempts destroys the secret.

post/OneTimeSecrets/{token}/Reveal

Request

  • Base URL: https://api.tonbridge.school
  • URL: https://api.tonbridge.school/OneTimeSecrets/{token}/Reveal
  • Auth: none declared

Path parameters

tokenstring required

Request body

authKeystring nullable

Example request

{}

Response

Success - revealed, or rejected with attempts left

revealedboolean
ciphertextstring nullable
attemptsRemaininginteger
burnReasonstring nullable

Changes