API

Fetch exact approved image bytes using an expiring capability

Generated from the checked-in source. Do not edit this reference by hand.

GET /v1/media/sources/{token}

Internal Provider handoff capability, not a customer download API. The secret path token authorizes at most four deliveries within sixty seconds. Current consent, policy, detector configuration and retained content are checked on every fetch. Never log or persist the token URL. Issuance is not exposed by this API. Query parameters, request bodies and range requests are unsupported.

Operation: fetchInspectedImageSource.

Authentication

No OpenAPI security scheme is required. Other request validation still applies.

[]

HTTP request

Set NIU_ORIGIN to your installation origin (without /v1). Replace path, query and header placeholders with the required values. Query examples use curl 7.87 or newer to encode values with --url-query. Use the credential scope described above; a bearer token must have the authority required by this operation.

curl --fail-with-body -X GET "$NIU_ORIGIN/v1/media/sources/{token}"

Parameters

token

Location: path. Required.

{
  "type": "string",
  "pattern": "^nis_[a-f0-9]{64}$"
}

Request body

No request body is declared.

Responses

HTTP 200

Exact verified image bytes; Cache-Control no-store, Referrer-Policy no-referrer and X-Content-Type-Options nosniff. No destination credentials are returned.

Content type: image/png.

{
  "type": "string",
  "format": "binary"
}

Content type: image/jpeg.

{
  "type": "string",
  "format": "binary"
}

Content type: image/webp.

{
  "type": "string",
  "format": "binary"
}

HTTP 400

Unsupported query or request body

HTTP 404

Opaque unavailable capability or source

HTTP 405

Only GET is supported

HTTP 416

Range requests are unsupported

HTTP 503

Transfer capacity exhausted

Response headers:

{
  "Retry-After": {
    "schema": {
      "type": "integer",
      "const": 1
    }
  }
}