Download Completed Report File via API Developer Key

[stevie_ray_g]

There is an API to start and run reports and check the status of a running report and when status=complete it will even give the download url of the report file:  https://canvas.instructure.com/doc/api/account_reports.html

When attempting to download the report file using the API developer key authentication, it does not authenticate.

Now I'm stuck, how do I authenticate to programmatically download the report file?  I've tried getting a refresh_token to use via google sso with no success.  Is there some known way to authenticate programmatically for the report download URLs?

BTW, the download URLs simply end up redirecting through to insgate cloud files, why not provide the direct link in the API instead of a link that requires user authentication?

Why not provide a download link that allows developer key authentication before the redirect?

[stevie_ray_g · Accepted solution]

Unfortunately as I mentioned in my original post I could not use any of the canvas API authentication mechanisms to download the report file.  Still seems silly to allow API access to start the report, check the status is completed, get the file_url for download, but not be able to use API authentication to allow the download.

What I have done to work around the deficiency is automate the user authentication login form with specific accounts user/pass.  

1. GET /login/canvas
2. Parse the response html and grab the value of authenticity_token.
3. POST authenticity_token, along with pseudonym_session[unique_id] and pseudonym_session[password] for a specially created user account.
4. Parse the response header with the cookie that contains the canvas_session value.
5. Get the file_url value from a completed report object using typical API calls.
6. GET <file_url> with the canvas_session as a cookie header.

[JawyeiWong]

I have the same issue here and looking at the community, I can't find anyone having the same problem with the download url redirecting to the login page. Not sure if there's a method that is not known or something has changed recently.

For your step 5 and 6 could you get sample code of how that looks? The fact that you have to do this makes the csv download not that great, I can't see why you can't just pass the bearer token to 'authenticate' who is downloading it.

Thanks,

[JawyeiWong]

It turns out, in linux at least, the url needs to be in quotes for wget to get the file. Also be careful of u0026 or \u0026 in the url as that is supposed to be &. E.g. "...?download_frd=1u0026verifier=...." should "...?download_frd=1&verifier=..."

[PearsonPrentice]

Do you have example code for this solution?