Get Media Token

Obtain a short-lived JWT that authorises access to protected media files hosted by Nexudus.

GET /api/auth/media/customer

Get Media Token

cURL

curl --request GET \
  --url https://spaces.nexudus.com/api/auth/media/customer \
  --header 'Authorization: Basic <encoded-value>'

200

{
  "jwt": "<string>",
  "401 Unauthorized": {}
}

Get Media Token

Issues a short-lived JWT scoped to the authenticated customer that can be appended to media URLs (as the t query parameter) to access protected files — such as invoice PDFs, uploaded documents, and other customer-specific media stored by Nexudus.

This token is distinct from the bearer token used for API calls. It is a lightweight media-access credential with a short expiry and must be refreshed before downloading files in long-lived sessions.

Authentication

Requires a valid customer bearer token in the Authorization header.

Request

No request body or query parameters are required.

GET /api/auth/media/customer
Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...

Response

Returns a JwtMedia object.

jwt · string

Short-lived JWT to append as ?t={jwt} when constructing authenticated media URLs. For example: /api/public/billing/invoices/{id}/pdf?t={jwt}.

Example Response

{
  "jwt": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI0MiIsIm..."
}

TypeScript Integration

import endpoints from '@/api/endpoints'
import { useData } from '@/api/fetchData'
import { JwtMedia } from '@/types/JwtMedia'

// The endpoint value is the raw URL string
const mediaTokenUrl = endpoints.system.mediaToken
// => '/api/auth/media/customer'

const { resource: mediaJwt } = useData<JwtMedia>(httpClient, mediaTokenUrl)

// Use the JWT when building a PDF link
const pdfUrl = endpoints.billing.invoices.pdf(invoiceId, mediaJwt)

Usage in Portal

Context	Source file
Invoice PDF download	src/views/billing/invoices/
File downloads (authenticated documents)	src/components/AuthenticatedLink.tsx

Error Responses

401 Unauthorized · error

The bearer token is missing, expired, or invalid. The customer must sign in again.

Related Endpoints

Method	Endpoint	Description
GET	/api/public/billing/invoices/{invoiceId}/pdf	Download an invoice PDF (requires this token)
POST	/api/sys/users/token/refresh	Obtain an authenticated redirect token
GET	/api/public/files/my	List files accessible to the current customer