Add Attachment to Ticket

This endpoint allows authorized users to upload a file attachment to an existing support or service ticket. The file must be Base64-encoded and submitted along with its name and MIME content type. Attachments can optionally be associated with a specific ticket message.

Endpoint

POST /api/tickets/attachment

Authentication

Bearer token required. Obtain via:

POST https://api.banking.netevia.dev/api/auth/v2

Include in header: Authorization: Bearer {token}
Token lifetime: 10 minutes. Refresh via POST /api/auth/refresh.

When to use

Use this endpoint when a partner or end user needs to provide supporting documentation for an open support ticket — for example, uploading a screenshot, statement, or signed form. The attachment is linked to the ticket (and optionally to a specific message within that ticket), giving the support team immediate access to the file during issue resolution.

Request Body

{
  "ticketId": 100234,
  "ticketMessageId": 500789,
  "fileName": "bank_statement_aug2024.pdf",
  "contentType": "application/pdf",
  "fileBase64": "JVBERi0xLjQKJcOkw7zDtsOfCjIgMCBvYmoKPDwvTGVuZ3RoIDMgMCBSL0ZpbHRlci9GbGF0ZURlY29kZT4+CnN0cmVhbQp4nC..."
}

Response

200 OK

{
  "ticketMessageId": 500789,
  "fileName": "bank_statement_aug2024.pdf",
  "contentType": "application/pdf",
  "fileBase64": "JVBERi0xLjQKJcOkw7zDtsOfCjIgMCBvYmoKPDwvTGVuZ3RoIDMgMCBSL0ZpbHRlci9GbGF0ZURlY29kZT4+CnN0cmVhbQp4nC...",
  "createdDate": "2024-08-15T10:30:00Z",
  "originalFileName": "bank_statement_aug2024.pdf"
}

Error Codes

Common Mistakes

• Omitting fileName, contentType, or fileBase64 — all three are required fields; the request will be rejected with a 400 error.
• Passing a raw binary file instead of a Base64-encoded string in fileBase64 — the value must be properly Base64-encoded before submission.
• Using an incorrect MIME type in contentType that does not match the actual file format, which may cause downstream issues when the attachment is rendered or downloaded.
• Supplying a ticketId that does not belong to the authenticated user's account, resulting in a 403 or 404 response.

Related Endpoints

• POST /api/tickets/message — Add a text message or comment to an existing ticket
• GET /api/tickets — Retrieve a list of support tickets for the authenticated user
• POST /api/tickets — Create a new support ticket

Example

curl -X POST https://api.banking.netevia.dev/api/tickets/attachment \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "ticketId": 100234,
    "ticketMessageId": 500789,
    "fileName": "bank_statement_aug2024.pdf",
    "contentType": "application/pdf",
    "fileBase64": "JVBERi0xLjQKJcOkw7zDtsOfCjIgMCBvYmoKPDwvTGVuZ3RoIDMgMCBSL0ZpbHRlci9GbGF0ZURlY29kZT4+CnN0cmVhbQp4nC..."
  }'