Presign a limit-request document upload

POST

https://client.api.corpx.com/v1/accounts/:accountId/limit-requests/:requestId/evidence/upload-url

POST

/v1/accounts/:accountId/limit-requests/:requestId/evidence/upload-url

curl -X POST https://client.api.corpx.com/v1/accounts/accountId/limit-requests/requestId/evidence/upload-url \
     -H "X-Content-SHA256: X-Content-SHA256" \
     -H "X-Request-Signature: X-Request-Signature" \
     -H "X-Request-Timestamp: X-Request-Timestamp" \
     -H "X-Tenant-Id: X-Tenant-Id" \
     -H "Authorization: Bearer <token>" \
     -H "Content-Type: application/json" \
     -d '{
  "contentType": "application/pdf",
  "documentType": "identity_document",
  "filename": "rg.pdf",
  "sizeBytes": 120000
}'

{
  "contentType": "application/pdf",
  "documentType": "identity_document",
  "evidenceId": "lrev_1",
  "expiresIn": 900,
  "key": "limit-request-evidences/tn/lr/lrev_1-rg.pdf",
  "method": "PUT",
  "requestId": "lr_01J9XQ8K2M3N4P5Q6R7S8T9U0V",
  "sizeBytes": 120000,
  "uploadUrl": "https://uploads.example/put"
}

Returns a 15-minute PUT URL. The browser uploads the bytes directly. The file then goes through the same quarantine, antivirus and sanitizer pipeline as MED evidence. Call .../evidence/add with the returned key. Allowed while the request is awaiting_documents or info_requested. documentType must belong to the account catalog, or be other when the reviewer asked for it.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Path parameters

accountIdstringRequired

Account identifier.

requestIdstringRequired

Limit request id.

Headers

X-Content-SHA256stringRequired

Lowercase hex SHA-256 of the body. An empty body hashes the empty string, so the header is always present. Mismatch returns 400 body_hash_mismatch.

Request

This endpoint expects an object.

Response

Presigned PUT.

Errors

409

Conflict Error

413

Content Too Large Error

422

Unprocessable Entity Error