Session Authentication
This protocol uses secure HTTP-only Session Cookies. Endpoints are accessible only when a valid user session is active.
Protocol Endpoints
/api/accept-messagesToggle whether your profile is currently accepting new whispers.
/api/auth/change-passwordUpdate the account password while the user is logged in.
/api/auth/delete-accountPermanently terminate account and wipe all associated protocol data.
/api/auth/forgot-passwordTrigger a password recovery email for a specific account.
/api/auth/reset-passwordFinalize password reset using a secure recovery token.
/api/delete-all-messagesWipe your entire whisper history. This action is irreversible.
/api/delete-messagePermanently remove a specific whisper from your inbox.
/api/get-messagesRetrieve the list of whispers received by the authenticated user.
/api/send-messageDeliver an anonymous whisper to a specific user profile.
/api/sign-upInitialize a new user account on the bawkKA protocol.
/api/suggest-messagesFetch AI-generated conversation starters for anonymous prompts.
/api/username-uniqueCheck real-time availability of a username during registration.
/api/verify-codeVerify the OTP or magic link code sent for authentication.