Skip to main content
Developer Compliance1.0.0-beta.1

Download clean submitted supplier evidence

Downloads an existing clean file from this case through the App. An audit entry is required before any bytes are released. Files are limited to 5 MB and returned as uncached attachments.

GET/api/v1/compliance/suppliers/{supplierId}/delivery/{caseId}/evidence/{fileId}

Workspace automation for approved Dashio products. Each token is scoped to one Space and independently granted operations. Requests spend shared minute credits, and selected operation groups also share hourly quotas.

Required token scope is compliance:supplier-delivery:evidence:read. Scopes are independent.

This operation uses 10 credits from a shared budget of 60 credits per token and 300 per Space each UTC minute. The file transfer group shares 24 requests per token and 60 per Space each UTC hour.

Run these examples on a trusted server with DASHIO_API_TOKEN configured. Use a private terminal when inspecting response data. Examples send one request with a bounded timeout and do not retry automatically.

Examples write successful response bytes to standard output. Redirect the output to a private file and verify the HTTP status before using it.

Authentication

Dashio developer token (HTTP Bearer) API authentication guide

Path parameters

supplierIdstringRequired

Stable supplier record ID in the token’s Space, up to 200 characters. Encode it as one path segment.

Example"supplier-001"
caseIdstring (uuid)Required

Delivery case UUID for the selected supplier.

fileIdstring (uuid)Required

File UUID from the clean submitted evidence list.

Query parameters

None documented.

Header parameters

None documented.

Request body

No content type declared

No request body schema is documented.

Responses

Headers on every response

X-Request-Idstring (uuid)Optional

Server-generated ID to include in a support request.

200

Audited evidence attachment, streamed through the App.

Response headers

RateLimit-LimitintegerOptional

Per-token capacity in the reported gateway window, expressed in requests of this operation. A shared Space budget also applies. Present when the request reaches the authenticated gateway. Minimum: 1.

RateLimit-RemainingintegerOptional

Requests of this operation remaining under the current token, Space and applicable operation-group quotas. Present when the request reaches the authenticated gateway. Minimum: 0.

RateLimit-ResetintegerOptional

Unix timestamp in seconds when the reported gateway quota resets. Present when the request reaches the authenticated gateway. Minimum: 0.

Content-DispositionstringOptional

Attachment with the encoded original filename.

Content-LengthintegerOptional

Exact file byte length. Minimum: 1. Maximum: 5000000.

application/pdf, image/png, image/jpeg

valuestring (binary)Optional

No field description supplied.

400

Invalid identifier, query, action or body.

application/json

statusCodeintegerRequired

Minimum: 400. Maximum: 599.

statusMessagestringOptional

A safe explanation suitable for display.

dataobjectRequired

No field description supplied.

401

Developer token is missing or invalid.

Response headers

WWW-AuthenticatestringOptional

Bearer authentication challenge. A rejected token can include the invalid_token error.

application/json

Uses the same response body schema as HTTP 400.

402

The operation requires an eligible Compliance entitlement.

application/json

Uses the same response body schema as HTTP 400.

403

The token lacks the required grant, or the plan does not permit the operation.

application/json

Uses the same response body schema as HTTP 400.

404

The API, Compliance, supplier, delivery case or clean evidence is unavailable.

application/json

Uses the same response body schema as HTTP 400.

429

The Developer request budget or supplier delivery receipt limit is exhausted. Edge traffic limits can also return 429.

Response headers

RateLimit-LimitintegerOptional

Per-token capacity in the reported gateway window, expressed in requests of this operation. A shared Space budget also applies. Present when the request reaches the authenticated gateway. Minimum: 1.

RateLimit-RemainingintegerOptional

Requests of this operation remaining under the current token, Space and applicable operation-group quotas. Present when the request reaches the authenticated gateway. Minimum: 0.

RateLimit-ResetintegerOptional

Unix timestamp in seconds when the reported gateway quota resets. Present when the request reaches the authenticated gateway. Minimum: 0.

Retry-AfterintegerOptional

Seconds to wait before retrying, when the limiting policy supplies a retry time. Minimum: 1.

application/json

Uses the same response body schema as HTTP 400.

503

Supplier delivery is temporarily unavailable.

application/json

Uses the same response body schema as HTTP 400.

Was this helpful?