DSAR-BE-1205: DELIVERY_TOKEN

Alpha

DSAR is currently in alpha. APIs, package surfaces, configuration, and documentation may change as the project evolves.

Meaning

The delivery token is missing, expired, or does not match the expected value. Delivery downloads and step-up challenge completions require a valid token.

Probable Causes

The x-delivery-token header was not included in the artifact download request.
The step-up challenge token submitted does not match the issued token.
The token has expired. Tokens are valid for 24 hours (86 400 seconds) after issuance. This TTL is hardcoded in the backend; the policy field tokenTtlSeconds is not honored at runtime.

How to Fix

Complete a step-up challenge to obtain a valid delivery token.
Include the token in the x-delivery-token header when downloading artifacts.
If the token has expired, request a new step-up challenge.

Retryable

No. A new valid token must be obtained before retrying.

Minimal Trigger Example

GET /api/v1/requests/req-123/artifacts/art-456/download HTTP/1.1
Host: localhost:4086
authorization: Bearer test-token