Discussions

I'm calling the Corrigo POST /api/v1/base/Blob endpoint to create a Blob (file upload), but I keep getting an "Access
Denied" response from the CDN edge server.

Request:

{
"Entity": {
"Id": 0,
"ActorId": "269322",
"ActorTypeId": "Wo",
"Body": "iVBORw0KGgo....",
"FileName": "1.jpg"
}
}

Response:

Access Denied
You don't have permission to access "http://az-am-ent-f6.corrigo-qa.com/api/v1/base/Blob" on this server.
Reference #18.2a672817.1786408920.74456d2d

Context:

• I'm using OAuth2 client_credentials grant type to obtain an access token and sending it as a Bearer token in the
  Authorization header.

• I also send the CompanyName header.

• Other Corrigo APIs work fine (e.g., POST /api/v1/cmd/WoCreateCommand, POST /api/v1/query/WorkOrder), so the
  authentication and headers are correct.

• The error originates from the Akamai CDN edge server (based on the edgesuite.net error page), which suggests the
  request is being blocked before it reaches the Corrigo application layer.

Questions:

1. Does the POST /api/v1/base/Blob endpoint require additional permissions or roles that need to be assigned to the
   API client (OAuth app) in the Corrigo Admin console?

2. Are there specific IP whitelist requirements for the Blob endpoint that differ from other endpoints?

3. Is there a specific scope or role in the OAuth client configuration that needs to be enabled for base/* CRUD
   operations?

4. Could the ActorTypeId or ActorId value affect access control — for example, does the API client need to be linked
   to the Work Order or have specific permissions on the actor entity?

Any guidance on how to configure the API client permissions to allow Blob creation would be appreciated.