Skip to main content
GET
Download a signed document
Returns the signed PDF of one document, once its signer has signed. You don’t need to build the URL: every signed document in the decision carries its path in signatures[].documents[].signed_file.
The PDF holds the document the signer was shown with their field values stamped, the evidence page (unless the step’s signature_evidence_page is off) and the PAdES signature with its timestamp. Before returning it, Didit checks the stored file against sha256_signed and answers 409 with signature_document_changed if they differ. A document that isn’t signed yet returns 404 with signature_not_signed. After you delete the session, the route returns 404.

Authorizations

x-api-key
string
header
required

Your application's API key, from Developers -> API keys in the Business Console. The primary key has full access. A named key can be scoped: none, read or write per resource, limited to some workflows or to approved sessions, to a list of IP addresses, and to an expiry date. 401 means the key is missing, wrong, revoked or expired; 403 means the key has no access to this resource or action, or the request came from an address outside its IP list; 404 on a session route means the session is outside the key's workflows or statuses. A key without media access receives image, video and PDF URLs as null, and a key without sessions write receives session links and tokens as null. See https://docs.didit.me/console/api-keys.

Path Parameters

sessionId
string<uuid>
required

The User Verification (KYC) or Business Verification (KYB) session.

Example:

"11111111-2222-3333-4444-555555555555"

nodeId
string
required

The Electronic Signature step: node_id of the item in signatures[].

Example:

"feature_signature"

documentId
string<uuid>
required

id of the document in signatures[].documents[].

Response

The signed PDF.

The response is of type file.