DUMA/ API

Asset file

Serves the file itself, for an <img src> or video source. It needs no key, because a browser cannot attach a header to an image request.

GEThttps://api.duma-business.com/v1/cms/delivery/assets/{id}/file/{name}

No key needed — the link itself is the permission

Keyless and public.

Sent with Cache-Control: public, max-age=31536000, immutable — a file never changes under the same id.

A file kept in a public storage bucket answers 302 with an absolute Location to that bucket’s URL.

SVG files are served with a sandboxing Content-Security-Policy.

A 404 when the asset does not exist, or when the workspace keeps unpublished media private and no published entry uses it.

Request example

Example request
curl -X GET "https://api.duma-business.com/v1/cms/delivery/assets/{id}/file/{name}"

Path parameters

idstring (uuid)Required
The asset’s id.

Optional

namestring
The file name. Optional and only for readable URLs; the id selects the file.

Response

Response · 200
"(the file’s bytes, sent with its own Content-Type, e.g. image/jpeg)"