Upload File

Upload a file to the authenticated user's Drive. Validates file type against a whitelist, enforces a 10 MB size limit, checks storage quota, and sanitizes the filename before storing.

POST /files/upload

Description

This endpoint uploads a file to the user's Drive. The file content must be sent as a base64-encoded string in the request body. The endpoint validates the MIME type and extension against a whitelist of allowed types, checks that the file does not exceed 10 MB, verifies the user has sufficient storage quota, and sanitizes the filename (replacing spaces with underscores and removing special characters). If no file category exists, a default "General" category is automatically created. Files are uploaded as private by default.

Authentication

This endpoint requires Bearer token authentication via the Authorization header.

Request Body

Field	Type	Required	Description
`Filename`	String	Yes	Original filename with extension (e.g. "report.pdf")
`MimeType`	String	Yes	MIME type of the file (e.g. "application/pdf")
`FileData`	String	Yes	Base64-encoded file content
`Private`	Boolean	No	Whether the file is private (default: true)

curl -X POST "https://api-v3.sweeppea.com/files/upload" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "Filename": "report.pdf",
    "MimeType": "application/pdf",
    "FileData": "JVBERi0xLjQKJeLjz9MK...",
    "Private": true
  }'

const response = await fetch('https://api-v3.sweeppea.com/files/upload', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    Filename: 'report.pdf',
    MimeType: 'application/pdf',
    FileData: 'JVBERi0xLjQKJeLjz9MK...',
    Private: true
  })
});

const data = await response.json();
console.log(data);

import requests
import base64

# Read and encode the file
with open("report.pdf", "rb") as f:
    file_data = base64.b64encode(f.read()).decode("utf-8")

url = "https://api-v3.sweeppea.com/files/upload"
headers = {
    "Authorization": "Bearer YOUR_API_KEY",
    "Content-Type": "application/json"
}
payload = {
    "Filename": "report.pdf",
    "MimeType": "application/pdf",
    "FileData": file_data,
    "Private": True
}

response = requests.post(url, headers=headers, json=payload)
print(response.json())

Response

200 OK

				{
  "Response": true,
  "Telemetry": {
    "DataConsumed": 0.000033,
    "APICalls": 42,
    "MaxAPICalls": 1500000
  },
  "Data": {
    "FileToken": "uuid-v4-string",
    "Filename": "report.pdf",
    "MimeType": "application/pdf",
    "Size": 34980,
    "SizeMB": 0.03,
    "Path": "userToken/documents/report.pdf",
    "CategoryToken": "uuid-v4-string",
    "Category": "General",
    "Private": true,
    "CreationDate": "2024-01-23T21:58:05.468Z"
  },
  "Message": "(OK) File uploaded successfully."
}
			

Error Responses

400 Bad Request — Missing or invalid fields

				{
  "Response": false,
  "Message": "Missing or invalid Filename.",
  "Help": {
    "ExpectedBody": {
      "Filename": "string (required) — Original filename with extension (e.g. \"report.pdf\")",
      "MimeType": "string (required) — MIME type of the file (e.g. \"application/pdf\")",
      "FileData": "string (required) — Base64-encoded file content",
      "Private": "boolean (optional) — Whether the file is private (default: true)"
    }
  }
}
			

400 Bad Request — File type not allowed

				{
  "Response": false,
  "Message": "File type \"application/zip\" is not allowed. Allowed types: PDF, DOC, DOCX, XLS, XLSX, PPT, PPTX, TXT, CSV, JPG, JPEG, PNG, GIF, WEBP, SVG, BMP."
}
			

400 Bad Request — File too large

				{
  "Response": false,
  "Message": "File size (12.50 MB) exceeds the maximum allowed size of 10 MB."
}
			

400 Bad Request — Storage quota exceeded

				{
  "Response": false,
  "Message": "Storage quota exceeded. Current usage: 4990.00 MB, file size: 15.00 MB, quota: 5000 MB, remaining: 10.00 MB."
}
			

401 Unauthorized

				{
  "Response": false,
  "Message": "Invalid or Missing Bearer Token",
  "Code": 401
}
			

403 Forbidden

				{
  "Response": false,
  "Message": "Invalid API Token",
  "Code": 403
}
			

500 Internal Server Error

				{
  "Response": false,
  "Message": "Internal Server Error",
  "Code": 500
}
			

Important Notes

📁 Max File Size: 10 MB per file. Files exceeding this limit are rejected
📄 Allowed Types: PDF, DOC, DOCX, XLS, XLSX, PPT, PPTX, TXT, CSV, JPG, JPEG, PNG, GIF, WEBP, SVG, BMP
🔒 Privacy: Files are uploaded as private by default. Set Private: false to make a file accessible
✏️ Filename Sanitization: Spaces are replaced with underscores, special characters are removed, and path traversal sequences are stripped
📂 Auto-Category: If the user has no file categories, a default "General" category is automatically created and assigned
💾 Storage Quota: The upload is rejected if it would exceed the user's plan storage quota

Sweeppea API v3