Error
A valid request URL is required to generate request examples{
"upload_url": "<string>",
"headers": {},
"public_url": "<string>"
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}Account
Sign an avatar upload
Returns a presigned PUT. The browser uploads straight to the bucket — bytes never pass through this server — and then saves the returned public_url with PATCH /v1/account. Content type and size are part of the signature, so the bucket enforces them.
POST
/
v1
/
account
/
avatar
/
upload-url
Error
A valid request URL is required to generate request examples{
"upload_url": "<string>",
"headers": {},
"public_url": "<string>"
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}{
"error": {
"code": "forbidden",
"message": "your role does not allow this action"
}
}Autorizações
A staff session token, uk_st_…. Minted by sign-up, sign-in or the two-factor exchange. Only a 401 means it is spent; not_a_member (403) is about the organization named in X-Organization-Id and leaves the token good for the others.
Corpo
application/json
Resposta
The presigned upload.
Everything the browser needs to PUT the file straight into the bucket, and everything the caller needs to reference it afterwards.