Proxy one authorized file through Athena

Authorization is always checked first against the Athena client selected by `X-Athena-Client`. Athena then streams the S3 object body directly and sets inline versus attachment disposition from the requested purpose.

Path Parameters

file_id*string

Query Parameters

purpose?string

Value in"read" | "download" | "stream"

Header Parameters

X-Athena-Client*string

Logical Athena client whose database stores the managed storage metadata and S3 catalog rows.

X-Athena-Auth-Session-Token?string

Preferred Athena Auth session token forwarded by the SDK for managed storage authorization.

Cookie?string

Optional cookie header. Athena Storage resolves athena-auth.session-token or athena-auth.session_token when present.

Authorization?string

Optional bearer token forwarded by trusted SDK callers. When configured, Athena mirrors bearer auth into storage session resolution.

X-User-Id?stringDeprecated

Deprecated trusted-server compatibility header. Primary Athena Storage auth resolves the actor from Athena Auth session context instead.

X-Organization-Id?stringDeprecated

Deprecated trusted-server compatibility header. Primary Athena Storage auth resolves the active organization from Athena Auth session context instead.

Response Body

`application/octet-stream`

curl -X GET "https://athena-cluster.com/storage/files/string/proxy" \  -H "X-Athena-Client: string"

Empty