Easy Labs
APIAccount & operationsAttachments

Generate a signed URL for an attachment

Returns a 1-hour signed URL for the given storage path. Ownership is enforced by checking that the first path segment matches the caller's company_id.

GET
/v1/auth/attachments/sign

Authorization

bearerAuth
AuthorizationBearer <token>

Supabase JWT bearer token for dashboard / user-scoped endpoints. Role-derived scopes: ROOT/ADMIN → full admin; USER → read-only treasury.

In: header

Query Parameters

path*string
Length1 <= length

Response Body

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://loading/v1/auth/attachments/sign?path=string"
{
  "success": true,
  "timestamp": "2019-08-24T14:15:22Z",
  "data": null,
  "message": "string",
  "pagination": {
    "total": 0,
    "limit": 1,
    "offset": 0,
    "has_more": true,
    "truncated": true,
    "cursors": {
      "first": "string",
      "last": "string"
    }
  }
}
{
  "success": false,
  "timestamp": "2019-08-24T14:15:22Z",
  "error": {
    "code": "string",
    "message": "string",
    "details": null
  }
}
{
  "success": false,
  "timestamp": "2019-08-24T14:15:22Z",
  "error": {
    "code": "string",
    "message": "string",
    "details": null
  }
}
{
  "success": false,
  "timestamp": "2019-08-24T14:15:22Z",
  "error": {
    "code": "string",
    "message": "string",
    "details": null
  }
}
{
  "success": false,
  "timestamp": "2019-08-24T14:15:22Z",
  "error": {
    "code": "string",
    "message": "string",
    "details": null
  }
}

Delete an attachment

Removes an attachment from storage. The first path segment must equal the caller's company_id.

Upload a bill for processing

Upload a bill document (PDF, PNG, JPEG, WebP) via multipart/form-data with field name `file`. The file is stored and extracted; the bill is returned ready for review.