Read protected presentation asset bytes
Required scopes: asset.get, presentation.get.
Requires a current bearer token, matching organization, presentation access and an asset referenced by this presentation or its unexpired staged upload. Other decks and foreign assets return 404. No signed/public download URL. Single bounded, open-ended or suffix byte ranges return 206; malformed, unsatisfiable and multi-ranges return 416 Problem Details with Content-Range: bytes */size. No conditional asset caching; all responses are no-store.
Response headers:
Cache-Control(200, 206).Content-Length(200, 206).Accept-Ranges(200, 206).X-Content-Type-Options(200, 206).Content-Security-Policy(200, 206).Content-Range(206).
Authentication
Organization-owned service token. Issue the initial token in organization credential settings. Scopes are documented per operation via x-required-scopes; they are not OAuth scopes.
Path parameters
Headers
Optional single bytes range, for example bytes=0-1023 or bytes=-1024.