Upload
POST
/files
const url = 'https://example.com/files';const form = new FormData();form.append('file', 'file');
const options = { method: 'POST', headers: {'Idempotency-Key': '2489E9AD-2EE2-8E00-8EC9-32D5F69181C0'}};
options.body = form;
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request POST \ --url https://example.com/files \ --header 'Content-Type: multipart/form-data' \ --header 'Idempotency-Key: 2489E9AD-2EE2-8E00-8EC9-32D5F69181C0' \ --form file=@fileWho can call it: Owners, Staff and Field users.
curl -X POST "https://spine.example.com/api/files" \
-H "Cookie: better-auth.session_token=<session>" \
-H "Idempotency-Key: $(uuidgen)" \
-H "Content-Type: application/json" -d '{ … }'Parameters
Section titled “Parameters”Header Parameters
Section titled “Header Parameters”Idempotency-Key
required
string format: uuid
A fresh UUID per action. A retry with the same key gets the first answer instead of doing it twice.
Request Bodyrequired
Section titled “Request Bodyrequired”Media typemultipart/form-data
object
file
string format: binary
Responses
Section titled “Responses”Validation failed or a business rule was broken; message says what to change.
No session, or it has expired: sign in again.
The caller’s role, Team rights or ownership don’t allow it, the module is switched off, or their access was removed.
No such record in this business.
The same Idempotency-Key is still being handled, or the record conflicts with one that exists.
Too many requests: wait a minute.
Something went wrong on the server; the response carries the request id to report.