Mint a re-auth challenge for GDPR deletion
Contacts
Mint a re-auth challenge for GDPR deletion
Mint a single-use, 5-minute re-authentication token for the irreversible GDPR delete of a contact. Call this first, then pass the returned token in the X-Reauth-Challenge header on DELETE /:id/gdpr/delete within 5 minutes — the delete returns 401 REAUTH_REQUIRED without a fresh, valid challenge. This step-up guards against an accidental or hijacked one-click erasure. Requires an authenticated user (401 otherwise).
POST
Mint a re-auth challenge for GDPR deletion