A ticket for a new version
const url = 'https://files.centralcodestation.com/api/v1/tenants/example/applications/example/files/example/versions';const options = { method: 'POST', headers: { 'if-match': 'example', Authorization: 'Bearer <token>', 'Content-Type': 'application/json' }, body: '{"size":1,"mime_type":"example","content_sha256":"example","comment":"example"}'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request POST \ --url https://files.centralcodestation.com/api/v1/tenants/example/applications/example/files/example/versions \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --header 'if-match: example' \ --data '{ "size": 1, "mime_type": "example", "content_sha256": "example", "comment": "example" }'The same protocol as a new file; completion makes the version current and reopens an approved file as draft.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”A file id (ULID).
The Identity Server tenant id.
The Identity Server application id: a tenant application, or (platform clients) the client’s own platform application.
Header Parameters
Section titled “Header Parameters”The revision you read; a stale one answers 412 revision_mismatch.
Replays the first answer for 24 hours when the same key is sent again (1 to 200 characters).
Request Bodyrequired
Section titled “Request Bodyrequired”object
Example generated
{ "size": 1, "mime_type": "example", "content_sha256": "example", "comment": "example"}Responses
Section titled “Responses”Created.
object
Known at once: store it in your own record.
put only: PUT the whole body here.
Send exactly these headers with the PUT, and nothing else.
object
The first 100 part URLs; POST …/parts for the rest.
object
GET only: the parts the store holds (resume from the first missing one).
object
Example
{ "upload_id": "01J9Z6S9Q5F5R6Y2W2GZ3B3K4E", "file_id": "01J9Z6S9Q5F5R6Y2W2GZ3B3K4D", "version_no": 1, "status": "open", "policy_applied": "default", "method": "put", "url": "https://upload.files.example/01J9Z6S9Q5F5R6Y2W2GZ3B3K4D?signature=...", "headers": { "Content-Type": "image/jpeg" }, "part_size": null, "parts_total": null, "parts": null, "expires_at": "2026-10-22T10:12:33.120Z"}Error. error is one of: invalid_request.
object
Stable snake_case error code.
Example
{ "status_code": 400, "error": "invalid_request", "message": "The request is malformed: a required field is missing, a value has the wrong type or format, or a field the route does not accept was sent", "path": "/api/v1/tenants/fitness-co/applications/fitness-app/files/01J9Z6S9Q5F5R6Y2W2GZ3B3K4D", "timestamp": "2026-10-22T09:12:33.120Z"}Error. error is one of: invalid_token.
object
Stable snake_case error code.
Example
{ "status_code": 401, "error": "invalid_token", "message": "The bearer token is missing, malformed, expired, signed by an unknown key, or has the wrong audience (`aud` must be `files-api`).", "path": "/api/v1/tenants/fitness-co/applications/fitness-app/files/01J9Z6S9Q5F5R6Y2W2GZ3B3K4D", "timestamp": "2026-10-22T09:12:33.120Z"}Error. error is one of: not_tenant_member, no_application_access, tenant_not_available, insufficient_scope, client_context_mismatch, files_access_not_granted, missing_action, tenant_suspended, folder_managed.
object
Stable snake_case error code.
Example
{ "status_code": 403, "error": "not_tenant_member", "message": "The user is not an active member of the tenant in the URL.", "path": "/api/v1/tenants/fitness-co/applications/fitness-app/files/01J9Z6S9Q5F5R6Y2W2GZ3B3K4D", "timestamp": "2026-10-22T09:12:33.120Z"}Error. error is one of: application_not_found, not_found.
object
Stable snake_case error code.
Example
{ "status_code": 404, "error": "application_not_found", "message": "The application in the URL is not an active application of the tenant.", "path": "/api/v1/tenants/fitness-co/applications/fitness-app/files/01J9Z6S9Q5F5R6Y2W2GZ3B3K4D", "timestamp": "2026-10-22T09:12:33.120Z"}Error. error is one of: file_locked, status_locked, file_trashed, file_quarantined, file_pending, folder_busy.
object
Stable snake_case error code.
Example
{ "status_code": 409, "error": "file_locked", "message": "Someone else holds a lock (check-out or edit session) on the file; `lock` describes it.", "path": "/api/v1/tenants/fitness-co/applications/fitness-app/files/01J9Z6S9Q5F5R6Y2W2GZ3B3K4D", "timestamp": "2026-10-22T09:12:33.120Z"}Error. error is one of: revision_mismatch.
object
Stable snake_case error code.
Example
{ "status_code": 412, "error": "revision_mismatch", "message": "The `If-Match` revision is stale: the item changed since it was read.", "path": "/api/v1/tenants/fitness-co/applications/fitness-app/files/01J9Z6S9Q5F5R6Y2W2GZ3B3K4D", "timestamp": "2026-10-22T09:12:33.120Z"}Error. error is one of: file_too_large, quota_exceeded.
object
Stable snake_case error code.
Example
{ "status_code": 413, "error": "file_too_large", "message": "The declared size is above the application's `max_file_size_bytes`, the upload policy's, the tenant's or the platform cap.", "path": "/api/v1/tenants/fitness-co/applications/fitness-app/files/01J9Z6S9Q5F5R6Y2W2GZ3B3K4D", "timestamp": "2026-10-22T09:12:33.120Z"}Error. error is one of: type_not_allowed.
object
Stable snake_case error code.
Example
{ "status_code": 422, "error": "type_not_allowed", "message": "The declared or detected type is outside the application's `allowed_types` (or the upload policy's).", "path": "/api/v1/tenants/fitness-co/applications/fitness-app/files/01J9Z6S9Q5F5R6Y2W2GZ3B3K4D", "timestamp": "2026-10-22T09:12:33.120Z"}Error. error is one of: rate_limited.
object
Stable snake_case error code.
Example
{ "status_code": 429, "error": "rate_limited", "message": "Too many requests in the current window; `retry_after` (and the `Retry-After` header) says when to retry.", "path": "/api/v1/tenants/fitness-co/applications/fitness-app/files/01J9Z6S9Q5F5R6Y2W2GZ3B3K4D", "timestamp": "2026-10-22T09:12:33.120Z"}Error. error is one of: identity_unavailable, storage_unavailable.
object
Stable snake_case error code.
Example
{ "status_code": 503, "error": "identity_unavailable", "message": "The service could not reach the Identity Server and has no fresh cached answer.", "path": "/api/v1/tenants/fitness-co/applications/fitness-app/files/01J9Z6S9Q5F5R6Y2W2GZ3B3K4D", "timestamp": "2026-10-22T09:12:33.120Z"}default
Section titled “default”Error: see error for the code.
object
Stable snake_case error code.
Example
{ "status_code": 403, "error": "invalid_request", "message": "This client is not bound to this tenant/application", "path": "/api/v1/tenants/t1/applications/a1/files/01J9Z6S9Q5F5R6Y2W2GZ3B3K4D"}