Retrieve an encrypted secret
GET/secret/:key
Returns the stored ciphertext. A one-time secret is deleted by this call,
so a second request returns 404. HEAD never consumes a secret.
Use GET /secret/{key}/status first if you need to know whether it is
one-time without reading it.
Secrets created with require_auth need a signed-in session cookie. API
tokens cannot read them.
Request
Responses
- 200
- 401
- 403
- 404
- 500
- 503
The secret.
Sign-in or an API token is required.
An error. message says what went wrong.
Not found, expired, already read (one-time) or revoked. A response without
JSON (404 page not found) means the route itself is switched off.
An error. message says what went wrong.
An error. message says what went wrong.