Skip to main content

Read a shared report

GET 

/report

Read with the share token in Authorization: Report <token>, never in the URL, so it stays out of proxy logs and Referer. Every failure, a missing, unknown or revoked token included, is one indistinguishable 404. Each read stamps the report's view times.

Responses​

OK.

Response Headers
    X-Request-Id

    The request's id, to quote in support requests. Echoes the request's X-Request-Id when it was at most 200 bytes of visible ASCII; otherwise generated.

    Cache-Control

    no-store: the response carries a secret or a shared report.

    Vary

    Includes Authorization: the response depends on the token. It may also name Origin, which the CORS policy adds.