Auth

Create Download Token Endpoint

Mint a short-lived download-scoped JWT for a single dataset.

The COG download URL path requires a typ='download' JWT on the ?token= query parameter — session JWTs are rejected. This endpoint issues that token after verifying the caller has read access to the dataset.

Anonymous callers are allowed for public datasets. The returned token has typ='download', scope='dataset:{dataset_id}', and a TTL of 120s.

post/auth/download-token/{dataset_id}

Request

  • The document declares no server URL.
  • Auth: one of:
    • none
    • OAuth 2 (password, token URL /api/auth/login)
    • API key in header X-Api-Key
    • API key in query parameter api_key

Path parameters

dataset_idstring uuid required

Response

Successful Response

tokenstring required

Short-lived download-scoped JWT (typ='download', TTL ≤ 120s)

expires_ininteger

Seconds until the download token expires

Changes

No recorded changes to this operation across all 50 revisions of this API.