Certificates and reports

curl -s "https://api.main-team.org/v1/<organizationId>/certificate/652f1c9b8e4b2a0012a3c4d5?limit=100" \
  -H "Authorization: Bearer $TOKEN"

{
  "success": true,
  "message": "Certificates fetched successfully.",
  "data": [
    {
      "_id": "6712a0b1c2d3e4f5a6b7c8d9",
      "application": "6703d4e5f6a7b8c9d0e1f203",
      "title": "Gold Medal",
      "shortId": "K2J8X0Q4TZ",
      "active": true,
      "createdAt": "2026-12-01T09:00:00.000Z",
      "updatedAt": "2026-12-05T12:00:00.000Z"
    }
  ],
  "pagination": { "page": 1, "limit": 100, "total": 1, "totalPages": 1 }
}

curl -s "https://api.main-team.org/v1/<organizationId>/report/652f1c9b8e4b2a0012a3c4d5" \
  -H "Authorization: Bearer $TOKEN"

{
  "success": true,
  "message": "Reports fetched successfully.",
  "data": [
    {
      "_id": "6712a0b1c2d3e4f5a6b7c8e0",
      "application": "6703d4e5f6a7b8c9d0e1f203",
      "relatedApplications": [],
      "shortId": "Q8ZK2M4X7P",
      "isActive": true,
      "isCanceled": false,
      "createdAt": "2026-12-01T09:00:00.000Z",
      "updatedAt": "2026-12-05T12:00:00.000Z"
    }
  ],
  "pagination": { "page": 1, "limit": 20, "total": 1, "totalPages": 1 }
}

curl -s -D headers.txt -o gold-medal.pdf \
  "https://api.main-team.org/v1/<organizationId>/certificate/download/K2J8X0Q4TZ" \
  -H "Authorization: Bearer $TOKEN"

HTTP/1.1 200 OK
Content-Type: application/pdf
Content-Length: 482113
Content-Disposition: attachment; filename="Ogrenci Sukru - Gold Medal.pdf"; filename*=UTF-8''%C3%96%C4%9Frenci%20%C5%9E%C3%BCkr%C3%BC%20-%20Gold%20Medal.pdf
X-Request-Id: 7c1d6f0a-2b9e-4c3d-8f1a-5e6b7c8d9e0f

import { createWriteStream } from 'node:fs';
import { rm } from 'node:fs/promises';
import path from 'node:path';
import { Readable } from 'node:stream';
import { pipeline } from 'node:stream/promises';

// kind is 'certificate' or 'report'; id is an _id or a shortId.
async function download(organizationId, kind, id, dir) {
  const res = await fetch(
    `https://api.main-team.org/v1/${organizationId}/${kind}/download/${encodeURIComponent(id)}`,
    { headers: { Authorization: `Bearer ${await getToken()}` } },
  );
  if (!res.ok) {
    const { error } = await res.json(); // errors are always JSON
    throw Object.assign(new Error(error.message), { status: res.status, code: error.code, requestId: error.request_id });
  }

  const name = path.basename(fileName(res.headers.get('content-disposition')) ?? `${id}.pdf`);
  const target = path.join(dir, name);
  try {
    await pipeline(Readable.fromWeb(res.body), createWriteStream(target));
  } catch (err) {
    await rm(target, { force: true }); // a cut-off transfer is a failed download
    throw err;
  }
  return target;
}

function fileName(disposition) {
  if (!disposition) return null;
  const exact = /filename\*=UTF-8''([^;]+)/i.exec(disposition);
  if (exact) return decodeURIComponent(exact[1]);
  const ascii = /filename="([^"]*)"/i.exec(disposition);
  return ascii ? ascii[1] : null;
}

<?php
// $kind is 'certificate' or 'report'; $id is an _id or a shortId.
function download(string $organizationId, string $kind, string $id, string $dir): string
{
    $tmp = tempnam($dir, 'dl');
    $fh = fopen($tmp, 'wb');
    $headers = [];

    $ch = curl_init("https://api.main-team.org/v1/{$organizationId}/{$kind}/download/" . rawurlencode($id));
    curl_setopt_array($ch, [
        CURLOPT_HTTPHEADER => ['Authorization: Bearer ' . getToken()],
        CURLOPT_FILE => $fh,
        CURLOPT_TIMEOUT => 120,
        CURLOPT_HEADERFUNCTION => function ($ch, $line) use (&$headers) {
            $parts = explode(':', $line, 2);
            if (count($parts) === 2) {
                $headers[strtolower(trim($parts[0]))] = trim($parts[1]);
            }
            return strlen($line);
        },
    ]);
    $ok = curl_exec($ch); // false when the transfer is cut off
    $status = curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
    curl_close($ch);
    fclose($fh);

    if (!$ok || $status !== 200) {
        $error = json_decode((string) file_get_contents($tmp), true)['error'] ?? [];
        unlink($tmp);
        throw new RuntimeException(sprintf('download failed: %s %s %s',
            $status, $error['code'] ?? 'transfer', $error['request_id'] ?? ''));
    }

    $name = fileName($headers['content-disposition'] ?? '') ?? "{$id}.pdf";
    $target = $dir . DIRECTORY_SEPARATOR . basename($name);
    rename($tmp, $target);
    return $target;
}

function fileName(string $disposition): ?string
{
    if (preg_match("/filename\\*=UTF-8''([^;]+)/i", $disposition, $m)) {
        return rawurldecode($m[1]);
    }
    if (preg_match('/filename="([^"]*)"/i', $disposition, $m)) {
        return $m[1];
    }
    return null;
}