GET /api/zeq-auth/salt/{zid}
The DB query runs unconditionally, so response timing remains close to the registered path (HMAC is microseconds; DB dominates).
- /login-v3 already flattens timing on the auth side, so even if an attacker
| Method | GET |
| Path | /api/zeq-auth/salt/{zid} |
| Feature area | Zeq Auth (OIDC broker) |
| Tag | Other |
| Auth | public (no key) |
| Tier | computation (public) |
Parameters
Path parameters
| Name | Type | Required | Description |
|---|---|---|---|
zid | string | yes | — |
No query or header parameters are published for this operation.
Request body
This operation takes no request body.
Responses
| Status | Meaning |
|---|---|
200 | OK |
400 | Bad request — a parameter or body field is missing or malformed |
500 | Server error |
400 body
| Field | Type | Required | Description |
|---|---|---|---|
ok | boolean — one of false | yes | — |
error | string | no | Human-readable message. |
code | string | no | Stable machine-readable code, e.g. ADMIN_REQUIRED, INVALID_ZID, ZID_NOT_LINKED. |
500 body
| Field | Type | Required | Description |
|---|---|---|---|
ok | boolean — one of false | yes | — |
error | string | no | Human-readable message. |
code | string | no | Stable machine-readable code, e.g. ADMIN_REQUIRED, INVALID_ZID, ZID_NOT_LINKED. |
Call it
curl -sS -X GET https://zeq.me/api/zeq-auth/salt/ZEQ7B3K9QX2M7T4V8N1C6H0DZ
Generated from the live OpenAPI description (https://zeq.me/openapi.json, spec version 1.287.0) by scripts/generate-reference.mjs. Do not edit — this file is rewritten on every run.