Game API
Home
LootLocker
Home
LootLocker
LootLocker
  1. Home
  • Back to home
  • Files
  • Create Download Link for Player File
    POST
  • List Files for Player
    GET
  • List Public Files for Player
    GET
  • Get File By ID for Player
    GET
  • Delete File By ID for Player
    DELETE
  • Upload Public File For Player
    POST
  • List File Revisions for Player
    GET
  • Get File Revision by ID for Player
    GET
  • Promote File Revision to Current for Player
    POST
  • Upload File for Player (with optional key for upsert)
    POST
  • Get File By Key for Player
    GET
  • Delete File By Key for Player
    DELETE
  • List File Revisions by Key for Player
    GET
  • Get File Revision by Key and Revision ID for Player
    GET
  • Promote File Revision by Key to Current for Player
    POST
  1. Home

Create Download Link for Player File

POST
https://api.lootlocker.com/game/player/files/{file_id}/download-link/v1
Mints a short-lived signed download URL for a file the caller owns.
This is the only way to obtain a link for a gated file - one whose listing reports requires_download_link: true, which is how a private file reward is granted: the reward hands the player a linkless row instead of a one-hour URL.
The endpoint is not restricted to gated files: any file the caller owns can be minted, so a client can always ask for a fresh link instead of caching one.
The link lives for 60 seconds and is a bearer credential: anyone holding it can download until it expires. Re-mint rather than cache or forward it.
The link is not single-use.
Tenancy is enforced: a file belonging to another player or another game returns 404, not 403, so the existence of another player's file cannot be probed.
Gating decides whether we hand out a URL, not whether the underlying object is reachable. If the object was uploaded for public access, its storage key can still be fetched directly.

Request

Authorization
API Key
Add parameter in header
x-session-token
Example:
x-session-token: ********************
or
Path Params

Responses

🟢200Success
application/json
The file with a freshly signed url.
Bodyapplication/json

🟠404File not found
🔴500Signing failed
Request Request Example
Shell
JavaScript
Java
Swift
curl --location --request POST 'https://api.lootlocker.com/game/player/files//download-link/v1' \
--header 'x-session-token: <api-key>'
Response Response Example
200 - Example 1
{
    "id": 0,
    "revision_id": "string",
    "name": "string",
    "key": "string",
    "size": 0,
    "purpose": "string",
    "public": true,
    "url": "string",
    "url_expires_at": "2019-08-24T14:15:22.123Z",
    "requires_download_link": true,
    "created_at": "2019-08-24T14:15:22.123Z"
}
Modified at 2026-10-20 14:50:51
Next
List Files for Player
Built with