Deletes a share, and whatever it put in the blob store.

DELETE

/api/v1/shares/{code}

Accepts either the owning account or, for an anonymous share, the management token from creation, sent as X-Share-Management-Token.

Errors

404 when no share of the caller's has that code. The same answer as one belonging to another account, because telling them apart would confirm which codes exist.

Authorization

cookietessera_session<token>

Set by POST /auth/login. A browser sends it automatically; it is HttpOnly, so page scripts cannot read or set it.

Path Parameters

code*string

The retrieval code. Normalised before lookup: O reads as 0, I and L read as 1, case is folded, spaces and hyphens are dropped, so 0ZPQ4M7K, ozpq-4m7k and OZPQ4M7K are the same share.

Response Body

Deleted

curl -X DELETE 'https://example.com/api/v1/shares/string'

Empty