Create a file (presigned upload)

curl --request POST \
  --url https://app.sajn.se/api/v1/files \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "fileName": "anstallningsavtal-kai-lindqvist.pdf",
  "mimeType": "application/pdf",
  "size": 184320,
  "checksum": "n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=",
  "visibility": "PRIVATE"
}
'

import requests

url = "https://app.sajn.se/api/v1/files"

payload = {
    "fileName": "anstallningsavtal-kai-lindqvist.pdf",
    "mimeType": "application/pdf",
    "size": 184320,
    "checksum": "n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=",
    "visibility": "PRIVATE"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    fileName: 'anstallningsavtal-kai-lindqvist.pdf',
    mimeType: 'application/pdf',
    size: 184320,
    checksum: 'n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=',
    visibility: 'PRIVATE'
  })
};

fetch('https://app.sajn.se/api/v1/files', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.sajn.se/api/v1/files",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'fileName' => 'anstallningsavtal-kai-lindqvist.pdf',
    'mimeType' => 'application/pdf',
    'size' => 184320,
    'checksum' => 'n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=',
    'visibility' => 'PRIVATE'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://app.sajn.se/api/v1/files"

	payload := strings.NewReader("{\n  \"fileName\": \"anstallningsavtal-kai-lindqvist.pdf\",\n  \"mimeType\": \"application/pdf\",\n  \"size\": 184320,\n  \"checksum\": \"n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=\",\n  \"visibility\": \"PRIVATE\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://app.sajn.se/api/v1/files")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"fileName\": \"anstallningsavtal-kai-lindqvist.pdf\",\n  \"mimeType\": \"application/pdf\",\n  \"size\": 184320,\n  \"checksum\": \"n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=\",\n  \"visibility\": \"PRIVATE\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://app.sajn.se/api/v1/files")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"fileName\": \"anstallningsavtal-kai-lindqvist.pdf\",\n  \"mimeType\": \"application/pdf\",\n  \"size\": 184320,\n  \"checksum\": \"n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=\",\n  \"visibility\": \"PRIVATE\"\n}"

response = http.request(request)
puts response.read_body

{
  "id": "cm4k2x9p10012abcd1234efgh",
  "filename": "anstallningsavtal-kai-lindqvist.pdf",
  "mimeType": "application/pdf",
  "size": 184320,
  "visibility": "PRIVATE",
  "url": "https://files.sajn.se/files/anstallningsavtal-kai-lindqvist.pdf",
  "createdAt": "2026-09-28T09:12:00.000Z",
  "updatedAt": "2026-09-28T09:15:00.000Z",
  "uploadedBy": {
    "id": "cm4k2x9p10002abcd1234efgh",
    "email": "[email protected]",
    "name": "Alex Berg"
  },
  "key": "f/cm4k2x9p10000abcd1234efgh/cm4k2x9p10012abcd1234efgh/anstallningsavtal-kai-lindqvist.pdf",
  "uploadUrl": "https://files.sajn.se/uploads/anstallningsavtal-kai-lindqvist.pdf?X-Amz-Expires=3600"
}

{
  "code": "VALIDATION_FAILED",
  "message": "Invalid input: expected string, received undefined",
  "userMessage": "Förfrågan innehåller ogiltiga värden.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2",
  "issues": [
    {
      "path": "fileName",
      "code": "INVALID_TYPE",
      "message": "Invalid input: expected string, received undefined"
    }
  ]
}

{
  "code": "UNAUTHORIZED",
  "message": "Invalid API token",
  "userMessage": "Ogiltig API-nyckel",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "INSUFFICIENT_SCOPE",
  "message": "Insufficient OAuth scope: requires documents:write",
  "userMessage": "Applikationen saknar behörighet (scope) för denna åtgärd.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2",
  "requiredScopes": [
    "documents:write"
  ],
  "grantedScopes": [
    "profile:read"
  ]
}

{
  "code": "INVALID_STATE",
  "message": "The resource's current state doesn't allow the operation, such as editing a document that was already sent or downloading a file that isn't produced yet.",
  "userMessage": "Åtgärden är inte möjlig i resursens nuvarande status.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "RATE_LIMITED",
  "message": "API rate limit exceeded",
  "userMessage": "För många förfrågningar. Försök igen om en stund.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "INTERNAL_ERROR",
  "message": "Internal server error",
  "userMessage": "Något gick fel.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "UPSTREAM_UNAVAILABLE",
  "message": "A service the operation depends on, such as an eID provider or a connected integration, failed or is unavailable. Retry with exponential backoff.",
  "userMessage": "En extern tjänst svarar inte just nu. Försök igen om en stund.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

Files

Create a file (presigned upload)

Create a file record and get a presigned URL to upload the bytes directly to storage.

Flow:

Compute the file’s SHA-256 hash and base64-encode it.
Call this endpoint with the filename, MIME type, size, and checksum. You receive the file object and a presigned uploadUrl.
PUT the raw bytes to uploadUrl with headers Content-Type: <mimeType> and x-amz-checksum-sha256: <checksum>. S3 verifies the checksum on write.
(Recommended) Call POST /api/v1/files/:id/confirm to verify the upload and flip the record to CONFIRMED immediately. Otherwise it is confirmed automatically the first time it is fetched via GET /api/v1/files/:id.

Why: the bytes go straight to storage, so there is no API-server size limit.

POST

api

files

Create a file (presigned upload)

curl --request POST \
  --url https://app.sajn.se/api/v1/files \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "fileName": "anstallningsavtal-kai-lindqvist.pdf",
  "mimeType": "application/pdf",
  "size": 184320,
  "checksum": "n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=",
  "visibility": "PRIVATE"
}
'

import requests

url = "https://app.sajn.se/api/v1/files"

payload = {
    "fileName": "anstallningsavtal-kai-lindqvist.pdf",
    "mimeType": "application/pdf",
    "size": 184320,
    "checksum": "n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=",
    "visibility": "PRIVATE"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    fileName: 'anstallningsavtal-kai-lindqvist.pdf',
    mimeType: 'application/pdf',
    size: 184320,
    checksum: 'n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=',
    visibility: 'PRIVATE'
  })
};

fetch('https://app.sajn.se/api/v1/files', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.sajn.se/api/v1/files",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'fileName' => 'anstallningsavtal-kai-lindqvist.pdf',
    'mimeType' => 'application/pdf',
    'size' => 184320,
    'checksum' => 'n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=',
    'visibility' => 'PRIVATE'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://app.sajn.se/api/v1/files"

	payload := strings.NewReader("{\n  \"fileName\": \"anstallningsavtal-kai-lindqvist.pdf\",\n  \"mimeType\": \"application/pdf\",\n  \"size\": 184320,\n  \"checksum\": \"n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=\",\n  \"visibility\": \"PRIVATE\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://app.sajn.se/api/v1/files")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"fileName\": \"anstallningsavtal-kai-lindqvist.pdf\",\n  \"mimeType\": \"application/pdf\",\n  \"size\": 184320,\n  \"checksum\": \"n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=\",\n  \"visibility\": \"PRIVATE\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://app.sajn.se/api/v1/files")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"fileName\": \"anstallningsavtal-kai-lindqvist.pdf\",\n  \"mimeType\": \"application/pdf\",\n  \"size\": 184320,\n  \"checksum\": \"n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg=\",\n  \"visibility\": \"PRIVATE\"\n}"

response = http.request(request)
puts response.read_body

{
  "id": "cm4k2x9p10012abcd1234efgh",
  "filename": "anstallningsavtal-kai-lindqvist.pdf",
  "mimeType": "application/pdf",
  "size": 184320,
  "visibility": "PRIVATE",
  "url": "https://files.sajn.se/files/anstallningsavtal-kai-lindqvist.pdf",
  "createdAt": "2026-09-28T09:12:00.000Z",
  "updatedAt": "2026-09-28T09:15:00.000Z",
  "uploadedBy": {
    "id": "cm4k2x9p10002abcd1234efgh",
    "email": "[email protected]",
    "name": "Alex Berg"
  },
  "key": "f/cm4k2x9p10000abcd1234efgh/cm4k2x9p10012abcd1234efgh/anstallningsavtal-kai-lindqvist.pdf",
  "uploadUrl": "https://files.sajn.se/uploads/anstallningsavtal-kai-lindqvist.pdf?X-Amz-Expires=3600"
}

{
  "code": "VALIDATION_FAILED",
  "message": "Invalid input: expected string, received undefined",
  "userMessage": "Förfrågan innehåller ogiltiga värden.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2",
  "issues": [
    {
      "path": "fileName",
      "code": "INVALID_TYPE",
      "message": "Invalid input: expected string, received undefined"
    }
  ]
}

{
  "code": "UNAUTHORIZED",
  "message": "Invalid API token",
  "userMessage": "Ogiltig API-nyckel",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "INSUFFICIENT_SCOPE",
  "message": "Insufficient OAuth scope: requires documents:write",
  "userMessage": "Applikationen saknar behörighet (scope) för denna åtgärd.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2",
  "requiredScopes": [
    "documents:write"
  ],
  "grantedScopes": [
    "profile:read"
  ]
}

{
  "code": "INVALID_STATE",
  "message": "The resource's current state doesn't allow the operation, such as editing a document that was already sent or downloading a file that isn't produced yet.",
  "userMessage": "Åtgärden är inte möjlig i resursens nuvarande status.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "RATE_LIMITED",
  "message": "API rate limit exceeded",
  "userMessage": "För många förfrågningar. Försök igen om en stund.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "INTERNAL_ERROR",
  "message": "Internal server error",
  "userMessage": "Något gick fel.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "UPSTREAM_UNAVAILABLE",
  "message": "A service the operation depends on, such as an eID provider or a connected integration, failed or is unavailable. Retry with exponential backoff.",
  "userMessage": "En extern tjänst svarar inte just nu. Försök igen om en stund.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

Authorizations

Authorization

string

header

required

Personal API key, e.g. Authorization: Bearer sajn_sk_.... Not scope-limited — acts as the issuing user.

Headers

Sajn-Version

enum<string>

API version for this request. Without it, the request uses the organization's default version; an organization without a default is pinned to the latest version by its first request.

Available options:

2026-09,

2026-10

Sajn-Workspace

string

ID of the workspace this request acts in, from GET /api/v1/workspaces. Without it, an API key acts in its default workspace. The token's user must be a member of the workspace; an OAuth token only accepts the workspace it was granted for. A workspace that doesn't exist or can't be reached returns 403 WORKSPACE_ACCESS_DENIED.

Idempotency-Key

string

Makes retries safe. A retry with the same key and the same request replays the stored response for 24 hours (header Idempotent-Replayed: true); the same key with a different request returns 400.

Maximum string length: 255

Body

application/json

Body

Request a presigned upload URL and create a pending file record

fileName

string

required

Original filename including its extension

Required string length: 1 - 255

mimeType

enum<string>

required

MIME type of the file

Available options:

application/pdf,

application/msword,

application/vnd.openxmlformats-officedocument.wordprocessingml.document,

application/vnd.ms-excel,

application/vnd.openxmlformats-officedocument.spreadsheetml.sheet,

application/vnd.ms-powerpoint,

application/vnd.openxmlformats-officedocument.presentationml.presentation,

video/mp4,

video/quicktime,

video/x-msvideo,

video/webm,

image/jpeg,

image/png,

image/gif,

image/webp,

image/svg+xml

size

integer

required

File size in bytes (max 25 MB)

Required range: x <= 26214400

checksum

string

required

Base64-encoded SHA-256 checksum of the file. S3 enforces it on upload, so a mismatch rejects the bytes.

Minimum string length: 1

visibility

enum<string>

default:PRIVATE

File visibility (default PRIVATE)

Available options:

PRIVATE,

PUBLIC

Response

The created file and the URL to upload its bytes to

string

required

Unique file identifier

filename

string

required

Original filename

mimeType

string

required

MIME type of the file

size

number

required

File size in bytes

visibility

enum<string>

required

File visibility

Available options:

PRIVATE,

PUBLIC

url

string<uri>

required

URL to access the file (signed URL for private, direct URL for public)

createdAt

string<date-time>

required

Date and time when file was uploaded

updatedAt

string<date-time>

required

Date and time when file was last updated

uploadedBy

object

required

The user who uploaded the file

Show child attributes

key

string

required

The storage key of the file. Set it as a PDF field's fieldMeta.value to render the file.

uploadUrl

string<uri>

required

Presigned PUT URL (valid 15 minutes). Upload the bytes here with headers Content-Type: and x-amz-checksum-sha256: .

Get started

Core concepts

Guides

Webhooks

API fundamentals

Upgrading

sajn Login

API reference

Create a file (presigned upload)

Authorizations

Headers

Body

Response