Sending attachments using custom scripted web service

[Thej1]

HI,

Created  a Scripted REST API and resources for the creation, updation, deletion and adding attachment for an incdent.

Tried with sending request from postman and working fine for Incident creation, updation and deletion.

But when i tried to add an attachment getting the response in postman as “request cannot sent” via postman or as “Invalid content type”.

Tried attachment with the OOB table API and it is working as expected.

Could someone help how to send request of adding attachment from postman ?

@Dr Atul G- LNG @Ankur Bawiskar 

Thanks

[Ankur Bawiskar · Accepted solution]

@Thej1 

it worked. you were not using the correct script which I shared above for SOAP Attachment creator.

I updated your scripted rest API script.

Also it seems you were not sending the complete base64 data

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Ankur Bawiskar]

@Thej1 

so it's working when you use scripted rest api

I didn't get what's not working then with postman

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Thej1]

Hi Ankur,

Sending an attachment via postman is not working the custom scripted REST API resource.

Thanks

[Ankur Bawiskar]

@Thej1 

are you sure you are sending the correct JSON body from postman?

share your scripted rest api script and postman snapshot how you are consuming the endpoint?

[Thej1]

Hi @Ankur Bawiskar ,

This is the script of the scripted web service

(function process(request, response) {
var sysId = request.pathParams.sys_id; // Get Incident Sys ID from the path parameter
var file = request.attachment; // Get file from the request

// Check if a file is present in the request
if (!file) {
gs.error("[Custom API] No file uploaded for Sys ID: " + sysId);
response.setStatus(400); // Bad Request
response.setBody({
status: "failure",
error: {
message: "No file uploaded"
}
});
return;
} else {
gs.info("[Custom API] File received. Name: " + file.fileName + ", Content-Type: " + file.contentType);
}

// Validate that the file content type is acceptable (optional, based on your requirements)
var allowedTypes = ["image/jpeg", "image/png", "application/pdf"]; // Add more as needed
if (allowedTypes.indexOf(file.contentType) === -1) {
gs.error("[Custom API] Invalid file type for Sys ID: " + sysId + ". Received type: " + file.contentType + ". Allowed types: " + allowedTypes.join(", "));
response.setStatus(400); // Bad Request
response.setBody({
status: "failure",
error: {
message: "Invalid file type",
received_type: file.contentType,
allowed_types: allowedTypes.join(", ")
}
});
return;
}

// Check if file size exceeds a limit (optional, adjust as needed)
var maxFileSize = 10000000; // 10MB for example
if (file.size > maxFileSize) {
gs.error("[Custom API] File size exceeds the limit for Sys ID: " + sysId + ". File size: " + file.size + " bytes");
response.setStatus(400); // Bad Request
response.setBody({
status: "failure",
error: {
message: "File size exceeds the limit",
max_size: maxFileSize,
current_size: file.size
}
});
return;
}

// Fetch the incident record using GlideRecord
var gr = new GlideRecord("incident");
if (gr.get(sysId)) {
gs.info("[Custom API] Incident found. Number: " + gr.number);

var attachment = new GlideSysAttachment();
try {
// Write the file to the incident record
attachment.write(gr, file.fileName, file.contentType, file.stream);
gs.info("[Custom API] File successfully attached to Incident: " + gr.number);

// Respond with success
response.setStatus(201); // Created
response.setBody({
status: "success",
message: "File uploaded successfully"
});
} catch (e) {
gs.error("[Custom API] Error while attaching file to Incident. Sys ID: " + sysId + ", Error: " + e.message);
response.setStatus(500); // Internal Server Error
response.setBody({
status: "failure",
error: {
message: "Error while attaching file",
detail: e.message
}
});
}
} else {
gs.error("[Custom API] Incident not found or restricted by ACL. Sys ID: " + sysId);
response.setStatus(404); // Not Found
response.setBody({
status: "failure",
error: {
message: "Incident not found"
}
});
}
})(request, response);

Postman snapshot is

Thanks