Authorize an inline attachment preview
Authorize an inline attachment preview
/api/v1/attachments/{attachment_id}/previewAuthorizes the caller against the attachment's Workspace at request
time and mints a short-lived presigned URL for browser display. The
object is served from the cookie-less object-storage origin with an
inline disposition, X-Content-Type-Options: nosniff, and the
server-detected content type.
Only clean PNG, JPEG, GIF, WebP, AVIF, and PDF attachments are previewable. SVG and every other type remain download-only. The URL is a credential, is minted per request, and must never be stored in content, events, notifications, or webhooks.
This operation is POST because it mints a credential; it is not a
cacheable read.
Path Parameters
Header Parameters
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.