One result file by a signed link from a run report - no account

GET

/public/files/{token}

const url = 'https://beta-api.plune.ai/public/files/example';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://beta-api.plune.ai/public/files/example

The target of the attachment links in a run report (XLSX or PDF, #1265, AC-05; #1643). The token is the file id, the second it ends at, and an HMAC-SHA256 under a key derived from the server secret; nothing is stored. A link ends at most 7 days after the report was made (the report says when, in UTC); the server checks the end and refuses one further off than 7 days. The report is kept 24 hours, so a link outlives its file. There is no revoking one link before its end; deleting the file, or its run going to the Bin, makes it 404, and changing the server secret ends every link. A bad signature, an ended link, an invented or deleted file, a file in the Bin and a file whose bucket is gone are ONE answer: 404 with the body { error: "not found" }. A file the platform keeps is the answer itself with its stored type (text as text/plain; charset=utf-8), Content-Disposition (inline for PNG, JPEG and WebP; attachment for the rest), X-Content-Type-Options: nosniff and a sandboxing Content-Security-Policy; a file in the project bucket is a 302 to a ten-minute link of the bucket. No cookie is read or set. Sent with Cache-Control: no-store, X-Robots-Tag: noindex, nofollow and Referrer-Policy: no-referrer. 120 a minute for a client address (429 with Retry-After; behind a proxy that does not pass the client address it is the edge address, docs/RUNBOOK.md 4e/4f).

Parameters

Path Parameters

token

required

string

Three dot-separated parts: base64url id, the end in epoch seconds, base64url signature.

Responses

200

The file

string format: binary

302

A file in the project bucket: its ten-minute link in Location.

404

No such link (bad signature, ended, no file).

429

Too many requests from this client address.