Complete Encrypted File Upload | Konfidant

Step 3 of a file share, after the ciphertext PUT has finished. Verifies that the uploaded object has the declared size and a valid KNF1 header, then returns the single-use download URL. Succeeds exactly once per upload. Uploads that are not completed within 2 hours expire.

Authentication

AuthorizationBearer

Konfidant API key (kf_live_... or kf_test_...), created by an organization admin in the dashboard.

Path parameters

fileKeystringRequiredformat: "^[0-9a-f]{64}$"

The file_key returned by POST /api/v1/files.

Response

Created

download_urlstringformat: "uri"

Single-use download URL with the server-issued token in the fragment (#t=...). It does not open the share by itself: append &k=<base64url key> to build the share link you send to the recipient.

file_idstring or null

Share ID; null unless verified burn is enabled.

expires_atdatetime

When the share link expires (ISO 8601).

verified_burnboolean

Whether the organization has verified burn enabled. When false, no share record is stored and the ID is null.

Errors

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

409

Conflict Error

410

Gone Error

422

Unprocessable Entity Error

429

Too Many Requests Error

502

Bad Gateway Error