tessera

Reads who has fetched one share.

GET
/api/v1/admin/shares/{id}/access-log

Why this is administrative and not the uploader's

The switch belongs to whoever runs the instance, so the record does too. Handing visitor addresses to every uploader would be a second decision about a visitor's privacy, made on behalf of an operator who agreed only to the first. On a shared instance the uploader is not the operator.

Letting uploaders see their own is a deliberate change to make, not one to arrive at by leaving this open.

Errors

401 when nothing was signed in, 403 when the caller may not read every share or used a bearer token, 404 when there is no such share or this instance has no administration.

session
cookietessera_session<token>

Set by POST /auth/login. A browser sends it automatically; it is HttpOnly, so page scripts cannot read or set it.

id*string

Which share

limit?integer

How many to return. Capped, and defaulted when omitted.

Formatint64
Range0 <= value
offset?integer

How many to skip.

Formatint64
Range0 <= value

Response Body

What has been recorded

application/json
  1. response

A share's recorded retrievals.

data*array<>

The events on this page, most recent first.

meta*

The collection they came from, and whether anything is being recorded.

curl -X GET 'https://example.com/api/v1/admin/shares/string/access-log'
{  "data": [    {      "ip_address": "string",      "occurred_at": "string",      "user_agent": "string"    }  ],  "meta": {    "enabled": true,    "limit": 0,    "offset": 0,    "total": 0  }}