Get a presigned URL to download the content of a file by its unique identifier.

The response includes a short-lived URL that can be used to download the file directly from cloud storage without additional authentication. The URL is valid for 1 hour; call this endpoint again to mint a fresh URL when needed.

Download availability is based on upload completion and redaction/obfuscation readiness. It is separate from processing status: a file can still report pending or failed from the Get file by id endpoint while the original bytes are available for download.

Images: for privacy, once an uploaded image has been re-encoded to strip embedded metadata (EXIF, XMP, GPS location, camera details) and bake in orientation, this endpoint serves that sanitized derivative instead of the original uploaded bytes. A newly uploaded image downloads as the original (still subject to the readiness rules above) until the sanitized derivative is ready, typically seconds; images in formats that cannot be sanitized (e.g. SVG, HEIC, AVIF) continue to download as the original.

Required scope: file:read