internkim
APIEvery endpointCompany

Upload the company's picture

The company's logo or portrait, sent as `multipart/form-data` in a `file` field. A picture arrives as bytes and the rest of this API takes JSON, which is why this one is an endpoint rather than a tool. The answer's `profileImageURL` is readable for an hour, and `company_settings_get` answers the same address. Only an administrator may change it.

POST
/company/profile-image

Authorization

memberToken
AuthorizationBearer <token>

The tools internkim uses inside a company, callable from outside it. A token belongs to a person, and every call runs as that person, so a token can never do more than its owner can.

The first token is made signed in, from the settings screen. After that a token makes its own successors: POST /token for a new one, DELETE /token for the old one, so a script rotates without a browser. A token can neither mint a rung above its own nor revoke itself. Send Authorization: Bearer <token> on every request.

In: header

Request Body

multipart/form-data

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

text/plain

text/plain

text/plain

text/plain

curl -X POST "https://example.com/company/profile-image" \  -F file="string"
{  "profileImageURL": "string"}