POST /recover-token: the owner token for whoever can prove write access to the account.
Public by construction, since the caller has no token. It shares the owner check's failure
budget, and the budget is read BEFORE the object hop so a refused address costs no Durable Object
request. A miss counts as a failure, which is why the client paces its retries.
POST /recover-token: the owner token for whoever can prove write access to the account.Public by construction, since the caller has no token. It shares the owner check's failure budget, and the budget is read BEFORE the object hop so a refused address costs no Durable Object request. A miss counts as a failure, which is why the client paces its retries.