Download a submission attachment

GET 
/v1/flows/:flow_id/submissions/:submission_id/attachments/:attachment_id

Redirects (302, empty body) to a time-limited signed URL for the stored file — the same path a submission's attachments[].url field carries. 404s for a flow, submission, or attachment this key cannot see, or an attachment not yet stored (status other than stored) — all on the same terms as the other operations: no existence oracle. Requires the submissions:read scope.

Request

Responses

302

Redirects to a presigned download URL, valid for 15 minutes. No response body.

Response Headers

Location

The presigned download URL.

400

A malformed flow_id, submission_id, or attachment_id (code: invalid_parameter).

401

Missing, malformed, unknown, revoked, or expired key — one body for all of them (code: unauthorized), with WWW-Authenticate: Bearer realm="hop".

403

The key lacks the scope (code: insufficient_scope), named in WWW-Authenticate: Bearer error="insufficient_scope", scope="…".

404

No such flow, submission, or attachment on it — or the attachment isn't stored yet. All answer identically (code: not_found): no existence oracle.

429

Over a bucket. Obey Retry-After (seconds); RateLimit-* fields are informational.

Response Headers

RateLimit-Limit

Requests allowed in the current window. Informational.

RateLimit-Remaining

Requests left in the current window. Informational.

RateLimit-Reset

Seconds until the window resets. Informational.

Retry-After

Seconds to wait before retrying. The binding contract.