Skip to main content

sharedResource

Resolves a share token to its publicly shareable resource. Does not require authentication.

Business Rules​

  • The token is the only credential; the query is accessible without a session.
  • Returns null uniformly for unknown, revoked, expired, view-limited, or password-mismatched links, so callers cannot distinguish which condition failed.
  • Each successful resolution counts as one view and is recorded in the audit trail.
  • The resource is returned as a hand-curated Shared type; it never exposes internal types.

Error Scenarios​

  • None. All failure modes resolve to null.

Permissions Required​

  • None. Possession of a valid token grants read access to its curated resource.
sharedResource(
  password: String
  token: String!
): SharedResourcePayload

Arguments​

sharedResource.password ● String scalar common​

Password for password-protected links.

sharedResource.token ● String! non-null scalar common​

Share token. Always pass it as a GraphQL variable so it is redacted from server logs.

Type​

SharedResourcePayload object common​

The result of resolving a share token.