Download the delegated encrypted export

GET

/api/replication-backups/{grantId}/exports/{operationId}/download

Shell / cURL

curl --request GET \
  --url https://auth.example.com/api/replication-backups/example/exports/example/download \
  --header 'Authorization: Bearer <token>' \
  --header 'X-Tenant-Id: example'

Requires the grant-specific bearer credential and exact X-Tenant-Id. Every request rechecks expiry, revocation and installed source scope. Only exports created by this grant with the fixed issuer and selection are accessible. Audit persistence is required. Every encrypted part is integrity-checked and the grant rechecked before transmission. Revocation, expiry or changed publication terminates the stream; clients must reject incomplete downloads and verify the separately authenticated export receipt.

Authorizations

replicationExportCredential

Parameters

Path Parameters

grantId

required

string

/^[A-Za-z0-9_.:-]{1,128}$/

operationId

required

string

/^[A-Za-z0-9_.:-]{1,128}$/

Header Parameters

X-Tenant-Id

required

string

/^[A-Za-z0-9_.:-]{1,128}$/

Must match both the installed source deployment and the grant tenant.

Responses

200

Concatenated encrypted parts; no-store.

application/octet-stream

string format: binary