Update file

Authorization

bearerAuth

AuthorizationBearer <token>

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

file_name?string

approval_needed?number

signature_needed?number

customer_id?|

Declared on UpdateUploadInput as a STRING pointer while models.Upload.CustomerID is a UUID pointer, and the update applies the body through commonutil.Populate. setFieldValue finds *string neither convertible nor assignable to *uuid.UUID, logs "Cannot assign" and skips the field, so sending it here does not move the upload between customers. Use POST /v1/uploads/customer/{customer_id}, where the path segment is authoritative.

metadata?

active?boolean

Response Body

`application/json`

curl -X PUT "https://example.com/v1/uploads/497f6eca-6276-4993-bfeb-53cbbbba6f08" \  -H "Content-Type: application/json" \  -d '{}'

{
  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
  "file_name": "string",
  "document_type": "bylaws",
  "approval_status": "pending",
  "approval_needed": 0.1,
  "approval_made": 0.1,
  "signature_status": "pending",
  "signature_needed": 0.1,
  "signature_made": 0.1,
  "customer_id": "160c0c4b-9966-4dc1-a916-8407eb10d74e",
  "content_length": 0,
  "file_extension": "string",
  "active": true,
  "metadata": {},
  "created_at": "2019-08-24T14:15:22Z",
  "modified_at": "2019-08-24T14:15:22Z",
  "modified_by": "e8d4374d-93a1-4e98-a6c6-fdcf00c5059f",
  "created_by": "ee824cad-d7a6-4f48-87dc-e8461a9201c4"
}

{
  "status": 400,
  "code": "uploads.invalid_file_extension",
  "message": "Invalid file extension"
}

{
  "status": 401,
  "message": "Unauthorized",
  "code": "common.unauthorized",
  "class": "business"
}

{
  "status": 403,
  "message": "No access to the record",
  "code": "common.rbac_no_rec_access",
  "class": "business"
}

{
  "status": 404,
  "code": "uploads.record_not_found",
  "message": "Record not found"
}

{
  "status": 429,
  "message": "Rate limit for 203.0.113.7 to /v1/uploads exceeded.",
  "code": "rate_limits_m.exceeded",
  "class": "temporary",
  "retryable": true
}

{
  "status": 500,
  "message": "Internal server error",
  "code": "common.server_error",
  "class": "business"
}

{
  "overall_status": "unhealthy",
  "message": "Service is shutting down",
  "timestamp": "2026-08-27T15:04:05Z"
}

Authorization

Path Parameters

Request Body

Response Body

200application/json

400application/json

401application/json

403application/json

404application/json

429application/json

500application/json

503application/json

Example invalidFileExtension

Example invalidDocumentType

Example invalidUploadInput

Example fileTooLarge

rbac.CanCallAPIv0 denied the endpoint grant — the helper's default code

The tenant's licence does not cover the uploads module

The handler's own record-level check — the common case

Example uploadNotFound

Example customerNotFound

The per-user or per-IP limit for this endpoint

The same refusal from common/rbac — the code is a raw English string, not a key

Graceful shutdown — LifecycleMiddleware, root router, not the envelope

ensureCacheAvailable could not reach the auth cache — the envelope

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`