Skip to main content
POST
Create signed file URLs

Restrictions

Usage

  • Works for any file of a live gallery artifact in the account; for other session files the caller needs access to the source session (or a valid share_token). A missing file and a file the caller cannot reach both fail with ResourceNotFound.
  • Both URLs expire after expires_in seconds (300). Sign again to get fresh URLs.
  • The URLs are relative: prepend https://api.flashcat.cloud and call them with GET /safari/artifact/stream, authenticated as the same member that signed them. The token is bound to the account and that member, so it does not work for anyone else.

Authorizations

app_key
string
query
required

APP Key created in the Flashduty console under My → APP Key. Send it as the app_key query parameter or in the Fd-App-Key request header. Its effective access is the intersection of the key's permission scope and the creator's current role permissions. Keep it secret.

Body

application/json

Request signed download/preview URLs for a presented file.

file_id
string
required

Presented-file ID (pf_ prefix) to sign.

share_token
string

Optional session share-link token. Needed only when the caller reaches the file through a shared session link rather than account membership.

Response

Success

Standard response envelope used by every Flashduty public API. On success data contains the endpoint-specific payload and error is absent. On failure error is present and data is absent. request_id is always present and is also mirrored in the Flashcat-Request-Id response header.

request_id
string
required

Unique ID for this request. Mirrored in the Flashcat-Request-Id header. Include it when reporting issues.

Example:

"01HK8XQE3Z7JM2NTFQ5YJ8P9R4"

error
object

Error payload inside the response envelope. Present only on non-2xx responses.

data
object

Short-lived signed URLs for downloading or previewing a file.