Get loyalty points export download link

Exports ordinary reward-coin history; XP and premium currency are excluded. Requires a community Bearer API key with customerSuccess permission and LOYALTY_EXPORTS_ENABLED=true. Personal keys are rejected. No per-key allowlist is required. Responses use Cache-Control: no-store; query parameters are rejected.

Returns a CloudFront signed URL for a completed private artifact, using MEDIA_CDN_BASE_URL, CLOUDFRONT_PUBLIC_KEY_ID and CLOUDFRONT_PRIVATE_KEY. url_expires_at is an ISO UTC timestamp, at most 300 seconds after generation and bounded by artifact retention. Fetch the URL without forwarding the API key. CloudFront must require the trusted key group on loyalty-exports/*; signing alone does not enforce expiry.

Pending/processing/failed/cancelled jobs return 409; expired artifacts return 410; invalid artifact, CDN or signing configuration returns 503. The worker uploads to AWS_BUCKET_NAME. Deployment verification on 2026-09-28 found unsigned and expired URLs still returned 200: restrict viewer access before exposing customer data.

{ "meta": { "status": "success", "statusCode": 200, "requestId": "req_example" }, "message": "Loyalty export download success.", "data": { "filename": "points-1790564400000.csv", "url": "https://d3rmnn4nycmrr2.cloudfront.net/loyalty-exports/507f1f77bcf86cd799439011/507f1f77bcf86cd799439012/attempt-1/points-1790564400000.csv?Expires=1790564700&Key-Pair-Id=PUBLIC_KEY_ID&Signature=EXAMPLE", "url_expires_at": "2026-09-28T03:05:00.000Z" } }

Get loyalty points export download link

Request

Responses