Download the original XLSForm

GET 
/v1/flows/:flow_id/source

Redirects (302, empty body) to a time-limited signed URL for the XLSForm the flow's current version was uploaded from, or its latest version when none is published, saved under its original file name. 404 for a flow this key cannot see, and 404 for a flow that was authored as Flow JSON or whose source is not stored as a file; the detail says which. Requires the flows:read scope.

Request

Responses

302

Redirects to a signed download URL, valid for 15 minutes. No response body.

Response Headers

Location

The signed download URL.

400

A malformed flow_id (code: invalid_parameter).

401

Missing, malformed, unknown, revoked, or expired key — one body for all of them (code: unauthorized), with WWW-Authenticate: Bearer realm="hop".

403

The key lacks the scope (code: insufficient_scope), named in WWW-Authenticate: Bearer error="insufficient_scope", scope="…".

404

No such flow, or the flow has no source form to download (code: not_found; the detail says which).

429

Over a bucket. Obey Retry-After (seconds); RateLimit-* fields are informational.

Response Headers

RateLimit-Limit

Requests allowed in the current window. Informational.

RateLimit-Remaining

Requests left in the current window. Informational.

RateLimit-Reset

Seconds until the window resets. Informational.

Retry-After

Seconds to wait before retrying. The binding contract.