Supplier file upload signed URL

ERP gets signed PUT URL for direct storage upload up to 50 MB.

Why this method exists

ERP gets signed PUT URL for direct storage upload up to 50 MB.

When to use

After create, before import.

Endpoint

POST /v1/supplier/incoming/upload-url

Authentication: X-Api-Key header (prefix bk_sup_). Do not send projectId or actor id in body — they come from the key.

Scope: supplier:incoming:write

Request example

{
  "meta": { "requestId": "optional-uuid" },
  "data": { "incomingId": "f47ac10b-…", "fileName": "Промокоды_Промомед_июль.xlsx", "fileSizeBytes": 245760, "contentType": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet" }
}

Response example

{
  "success": true,
  "data": {
    "incomingId": "f47ac10b-…",
    "uploadUrl": "https://supabase.promanta.ru/storage/v1/object/upload/sign/…",
    "uploadMethod": "PUT",
    "expiresAt": "2026-07-13T10:15:00Z",
    "maxFileSizeBytes": 52428800
  }
}

Errors

UNAUTHORIZED / ACCESS_DENIED — access denied
VALIDATION_ERROR — invalid body
NOT_FOUND — resource not found
RATE_LIMIT_EXCEEDED (429) — rate limit

cURL

curl -X POST "https://api-external.promanta.ru/v1/supplier/incoming/upload-url" \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: YOUR_API_KEY" \
  -d '{"data": { "incomingId": "f47ac10b-…", "fileName": "Промокоды_Промомед_июль.xlsx", "fileSizeBytes": 245760, "contentType": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet" }}'