POST /share/{token}/verify
Trocar password por session_token (TTL 1h)
- Access: Public (link or signature)
- Service:
https://files-api.axuz.net
Accepted authentication
No authentication (public route, or protected by link/signature).
Senha inválida NÃO conta access_count (evita brute-force inflar contador). Link sem password também emite session (UI trata todos os fluxos igual).
Parameters
| Name | In | Type | Required | Description |
|---|---|---|---|---|
token | path | string | yes | Token opaco base64url (32 bytes ≈ 43 chars) ou UUID legacy. |
Request body
application/json
| Name | Type | Required | Description |
|---|---|---|---|
password | string | no |
{
"password": "string"
}Responses
200
OK
| Name | Type | Required | Description |
|---|---|---|---|
ok | boolean | no | |
session_token | string | no |
401
Invalid password
410
Link revogado ou expirado
429
Limite de requisições excedido.
| Name | Type | Required | Description |
|---|---|---|---|
error | string | yes |
500
Erro interno. Tente de novo com backoff; reporte o X-Request-Id.
| Name | Type | Required | Description |
|---|---|---|---|
error | string | yes |
Examples
"Try it" is turned off in this reference. Use the examples with your test credential.
curl
curl -sS -X POST 'https://files-api.axuz.net/share/TOKEN/verify' \
-H "Content-Type: application/json" \
-d '{"password":"string"}'Node.js
const res = await fetch("https://files-api.axuz.net/share/TOKEN/verify", {
method: 'POST',
headers: {
'Content-Type': 'application/json',
},
body: JSON.stringify({
"password": "string"
}),
});
if (!res.ok) throw new Error(`HTTP ${res.status}: ${await res.text()}`);
console.log(await res.json());Python
import os
import requests
res = requests.request(
"POST",
"https://files-api.axuz.net/share/TOKEN/verify",
json={
"password": "string",
},
timeout=30,
)
res.raise_for_status()
print(res.json())