Api referenceShares
Report Share
Flag a share for abuse review. Idempotent.
curl -X POST "https://loading/v1/shares/string/report"null{
"detail": [
{
"ctx": {},
"input": null,
"loc": [
"string"
],
"msg": "string",
"type": "string"
}
]
}Get Share GET
Return share snapshot + presigned file URLs for ISR rendering. Called by the Next.js ISR renderer on apps/chat. No auth required; the slug itself is the capability (22-char base58, unguessable). Revoked shares return 410 Gone.
Revoke Share DELETE
Owner revoke: flip is_public=false. Effective within one 60s ISR window. The caller must be authenticated (any valid key); IDOR guard is enforced by checking that the share's session belongs to the calling user_id.