Skip to main content

Inline Support Attachment (signed URL)

GET 
/api/support/attachments/:attachment/inline

Serves a ticket attachment for a signed, expiring URL — no bearer token, no session: the signature is the whole authorisation. These URLs are never built by hand; every attachment in a message resource (GET /api/support/tickets/:ticket/messages, GET /api/support/agent/tickets/:ticket/messages) carries its own as url (inline) and download_url (download), valid for 2 hours. A message that arrived by email also has html_source: "email", its body_html rewritten so each cid: image source points at the matching attachment's url, and inline_attachment_ids listing the attachments shown that way.

Images (image/png, image/jpeg, image/gif, image/webp, image/bmp, image/avif) are served inline with their media type. Anything else — including SVG and HTML, which would execute in the app's origin — is always served as Content-Disposition: attachment under its original filename, whatever download says.

Available on the pod that holds the file (production); a remote intake pod answers 404. Central — no X-Tenant-Id.

Request​

Responses​

OK

Response Headers
    Content-Type
    Content-Disposition
    X-Content-Type-Options
    Cache-Control