Generate a time-limited presigned S3 URL from an S3 object key. The returned URL expires after 1 hour and can be used directly for download without an auth header.
Use this endpoint when another API returns a raw S3 key. If your client cannot access S3 directly, pass the returned URL to GET /api/v1/proxy/file as the presigned_url query param.
Bearer token authentication. Token provides organization-scoped access.
S3 object key for the file (e.g., org-id/documents/protocol.pdf)
Presigned URL generated successfully
Presigned HTTPS URL for direct file download. Expires after 1 hour and requires no additional authentication.