Class UploadStatusResource

java.lang.Object

ai.pipestream.connector.intake.http.UploadStatusResource

@Path("/uploads/status")
public class UploadStatusResource
extends Object

Status lookup for an upload, addressed by the opaque tracking token returned at upload time (GET /uploads/status/{token}).

The signed token is the capability: holding a valid one authorizes seeing that document's status, so no separate API key is required here. A malformed or tampered token is rejected as a 400 by UploadTrackingToken.verify(String) (and rendered by the intake exception mapper). A valid token whose document has not yet been recorded returns PENDING rather than an error.

When OIDC is enabled (intake.oidc.enabled=true) a valid bearer token carrying the intake-client role is additionally required here — the tracking token proves which document, the bearer proves who is asking. While OIDC is off (the default) the OidcBypassAugmentor makes that role check inert, so the tracking token alone authorizes the lookup.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final record	UploadStatusResource.StatusResponse	Client-safe status projection — only curated fields, never internal detail.

Constructor Summary

Constructors

Constructor	Description
UploadStatusResource()

Method Summary

Modifier and Type	Method	Description
jakarta.ws.rs.core.Response	getStatus(String token)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

UploadStatusResource

public UploadStatusResource()

Method Details

getStatus

@GET
@Path("/{token}")
@Produces("application/json")
@RolesAllowed("intake-client")
public jakarta.ws.rs.core.Response getStatus(@PathParam("token")
 String token)