Validation API

Machine interface for the same governed validation as the public form.

Endpoint

POST https://trust.fidelir.com/api/v1/validate

One request, one file. Maximum 25 MB after decode. PDF (PAdES), ASiC, XAdES and CAdES. The connection is held until validation finishes (up to 120 seconds). Scope and indications follow the Validation Policy.

Multipart

Form field file. Same encoding as the public upload form. 

curl -sS -X POST -F "file=@document.pdf" https://trust.fidelir.com/api/v1/validate

JSON

Content-Type: application/json. Property file is Base64 (line breaks allowed). Optional filename. The HTTP body may be up to 36 MB so a 25 MB document still fits after Base64. 

curl -sS -X POST -H "Content-Type: application/json" -d '{"filename":"document.pdf","file":"<base64>"}' https://trust.fidelir.com/api/v1/validate

Optional

  • Form field or JSON property detailed=true — include the DSS detailed report XML.
  • Header Idempotency-Key — retry the same POST with the same key (max 128 characters).

Responses

  • 200 — finished (status is completed or failed)
  • 400 — empty file or invalid request
  • 405 — method other than POST
  • 413 — over 25 MB decoded, or JSON body over 36 MB
  • 429 / 503 / 504 — rate limit, queue, or wait cap; honour Retry-After

A completed job with overallIndication NO_SIGNATURES means the file was processed and no signatures were found — not a transport error. Cryptographic pass is not a statement of legal effect.