## Complete upload

`POST /v1/storage/objects/complete`

The second step of the presigned-URL upload — captures the actual file size and type from storage and moves the object to status `COMPLETED`.

## Request fields (body)

| Field | Type | Required | Default | Description |
|------|-----|:-----:|-----------|---------|
| `objectId` | string | yes | — | Object identifier from the [`POST /v1/storage/objects`](/docs/storage/upload/presigned) response |

## Examples

### curl — personal key

```bash
curl -X POST https://vibecode.bitrix24.com/v1/storage/objects/complete \
  -H "X-Api-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"objectId":"cmpf9b1gp003omr0zkc0qjojn"}'
```

### curl — OAuth application

```bash
curl -X POST https://vibecode.bitrix24.com/v1/storage/objects/complete \
  -H "X-Api-Key: YOUR_APP_KEY" \
  -H "Authorization: Bearer USER_SESSION_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"objectId":"cmpf9b1gp003omr0zkc0qjojn"}'
```

### JavaScript — personal key

```javascript
const res = await fetch('https://vibecode.bitrix24.com/v1/storage/objects/complete', {
  method: 'POST',
  headers: {
    'X-Api-Key': 'YOUR_API_KEY',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ objectId: 'cmpf9b1gp003omr0zkc0qjojn' }),
})

if (!res.ok) {
  const { error } = await res.json()
  console.error(error.code, error.message)
  return
}
const { object } = await res.json()
console.log('Upload complete, key:', object.key)
```

### JavaScript — OAuth application

```javascript
const res = await fetch('https://vibecode.bitrix24.com/v1/storage/objects/complete', {
  method: 'POST',
  headers: {
    'X-Api-Key': 'YOUR_APP_KEY',
    'Authorization': 'Bearer USER_SESSION_TOKEN',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ objectId: 'cmpf9b1gp003omr0zkc0qjojn' }),
})

const { object } = await res.json()
```

## Response fields

| Field | Type | Description |
|------|-----|---------|
| `object.id` | string | Object identifier |
| `object.key` | string | Logical object key |
| `object.contentType` | string | Actual file MIME type (captured from storage) |
| `object.sizeBytes` | string | Actual file size in bytes (string) |
| `object.sha256` | string | File SHA-256 hash or `null` |
| `object.visibility` | string | Visibility: `PRIVATE` or `PUBLIC` |
| `object.uploadStatus` | string | Upload status: `COMPLETED` |
| `object.createdAt` | string | Creation date (ISO 8601) |
| `object.deletedAt` | string | Deletion date or `null` |

## Response example

```json
{
  "object": {
    "id": "cmpf9b1gp003omr0zkc0qjojn",
    "key": "users/42/avatar.png",
    "contentType": "image/png",
    "sizeBytes": "20480",
    "sha256": null,
    "visibility": "PRIVATE",
    "uploadStatus": "COMPLETED",
    "createdAt": "2026-05-21T08:56:32.809Z",
    "deletedAt": null
  }
}
```

## Error response example

409 — the file was not sent to the presigned URL:

```json
{
  "success": false,
  "error": {
    "code": "STORAGE_UPLOAD_NOT_FOUND_IN_BUCKET",
    "message": "..."
  }
}
```

## Errors

| HTTP | Code | Description |
|------|-----|---------|
| 403 | `STORAGE_SCOPE_REQUIRED` | The API key lacks the `vibe:storage` scope |
| 401 | `STORAGE_NO_AUTH_CONTEXT` | The request was made without authorization |
| 400 | `STORAGE_OBJECT_ID_REQUIRED` | The `objectId` field was not provided |
| 404 | `STORAGE_OBJECT_NOT_FOUND` | No object found with the given `objectId` |
| 409 | `STORAGE_UPLOAD_NOT_PENDING` | The object was already completed earlier |
| 409 | `STORAGE_UPLOAD_NOT_FOUND_IN_BUCKET` | The file was not sent to the presigned URL |
| 415 | `STORAGE_FORBIDDEN_CONTENT_TYPE` | For `PUBLIC` objects, a MIME type was detected that is disallowed for security reasons; the object is deleted |
| 503 | `STORAGE_FEATURE_DISABLED` | Storage is disabled for the portal |
| 503 | `STORAGE_STS_UNAVAILABLE` | The temporary credentials issuance service is unavailable |
| 502 | `STORAGE_BUCKET_ERROR` | Error while interacting with storage |

Full list of common API errors — [Errors](/docs/errors).

## Known specifics

**Type check for `PUBLIC` objects.** The actual MIME type is determined from the storage data, not from the `contentType` field passed at the object-creation step. The types `text/html`, `application/javascript`, `application/x-javascript`, `image/svg+xml` are forbidden.

## See also

- [Upload](/docs/storage/upload)
- [Create presigned URL](/docs/storage/upload/presigned)
- [Direct upload](/docs/storage/upload/direct)
- [Multipart upload](/docs/storage/upload/multipart-create)
- [Storage](/docs/storage)