Download certificate source document

Returns the source document file that a certificate attests to

When to use this endpoint

• Use this endpoint to download a source document referenced by a certificate's sourceDocuments array
• The document is the artefact whose integrity the certificate preserves (for example the generated session data PDF)
• The certificateId and fileId values must be obtained first from GET /v1/sessions//certificates
• This endpoint is currently available as part of the Mexico - NOM-151 Certification solution

Getting the identifiers

1. Call GET /v1/sessions//certificates to retrieve the session certificates
2. Find the certificate id (the certificateId) and the sourceDocuments[].id (the fileId) of the document you want to download
3. Use both identifiers to download the file with this endpoint

Response data

• The endpoint returns a binary file with the application/pdf Content-Type
• The file is returned as binary data in the response body

Implementation notes

• This endpoint requires session-level HMAC signature authentication
• Set appropriate Content-Type handling in your HTTP client to receive binary data
• Always ensure that you use the correct API URL to send requests. See the API URL section for more info
• The order of parameters in the real API response can differ from the order you see in this documentation. This is expected and part of the Backwards compatible changes requirements

How to store response data to file?

import requests

file_url = 'https://example-base-url/v1/sessions/d69a07cf-4434-4d36-be6c-d22af7dc01fb/certificates/27d303bb-6a1f-4c2e-9b1d-2f3a4b5c6d7e/files/a6a27f7a-3c4d-4e5f-8a9b-0c1d2e3f4a5b'

headers = {
    'X-AUTH-CLIENT': 'your-api-key',
    'X-HMAC-SIGNATURE': '452bfca0e02f8ee0f56d97373cc6971067e43149f1b7e58b681d4e57353a2f6b',
    'Content-Type': 'application/json',
}

response = requests.get(file_url, headers=headers)
with open('certificate_source_document.pdf', 'wb') as write_file:
    write_file.write(response.content)