Skip to main content

LookupSignatureFromURLRequest

media_urlstringrequired

The URL of the media file to lookup the SASHA Signature from

publish_urlstring

The browser-facing URL where the media is displayed or is about to be published.

Used to evaluate the found signature's Record into distribution guidance on the completed job. Strongly recommended: without URL context, restricted media yields an inconclusive verdict.

source_urlstring

The URL the media bytes were fetched from (e.g. a CDN address).

Used to evaluate the found signature's Record into distribution guidance on the completed job.

media_mime_typestring

The MIME type of the media file at the given URL.

If not provided, the MIME type will be inferred from the URL.

The following MIME types are currently supported:

  • image/jpeg
  • image/png
  • image/webp

For the most up-to-date list of supported formats and other media constraints, see the Supported Formats reference.

callback_secret_idstring

Optional identifier of the Callback Secret SASHA should use to sign the callback payload for this job.

Each Callback Secret you have configured with SASHA has a unique Callback Secret ID. Pass it here to pin a job's callback signature to a specific secret — useful while rotating secrets, or when different parts of your system verify callbacks with different keys.

If omitted, SASHA picks one of your enabled Callback Secrets automatically. The Callback Secret that was actually used is always returned in the SASHA-Callback-Secret-ID HTTP header on the callback request, so your endpoint can look up the matching signing key when validating the SASHA-Request-Signature.

callback_urlstring<uri>

Optional callback URL to receive job status notifications

LookupSignatureFromURLRequest
{
  "media_url": "string",
  "publish_url": "string",
  "source_url": "string",
  "media_mime_type": "string",
  "callback_secret_id": "string",
  "callback_url": "string"
}