Frequently asked questions
Does Riversoft® STCP DirectLink work on its own?
No. It works integrated with Riversoft STCP Gemini Server (Linux) or Riversoft STCP Enterprise Server (Windows), where users and credentials are kept.
Does the portal use cookies?
Only the __Host-dirl_session session cookie, required to keep the user signed in. It is issued with the HttpOnly, Secure and SameSite=Strict attributes and removed at sign-out. The portal does not use tracking cookies.
Why does sign-in show a Cloudflare challenge?
The administrator enabled Cloudflare Turnstile, which protects sign-in, first access and password recovery against automation. The challenge generates a single-use token valid for 300 seconds.
Which file formats can I send?
Any format. In multipart mode, send the file in the file field; in transparent mode, send the content in the request body with the matching Content-Type.
Can I still use Basic on API calls?
Only at sign-in (/auth/login). Starting with version 9, upload, listings, report and sign-out require a Bearer token, obtained at sign-in, through the password grant or through token exchange. Obtain the token once and reuse it until it expires.
Does the API have a rate limit?
No. Rate limiting must be implemented on the environment’s edge firewall.
Can I download a file more than once?
Yes, while it is in the backup area: use /download/list/backup and the returned linkURL. Files leave the backup area according to the retention policies.