Check an editor link and refresh it if expired

POST

/v1/variations/edit-link/validate

package main

import (
  "fmt"
  "strings"
  "net/http"
  "io"
)

func main() {

  url := "https://api.grona.ai/v1/variations/edit-link/validate"

  payload := strings.NewReader("{ \"editUrl\": \"https://api.grona.ai/v1/editor/launch?token=eyJhbGciOi...\" }")

  req, _ := http.NewRequest("POST", url, payload)

  req.Header.Add("Authorization", "Bearer <token>")
  req.Header.Add("Content-Type", "application/json")

  res, _ := http.DefaultClient.Do(req)

  defer res.Body.Close()
  body, _ := io.ReadAll(res.Body)

  fmt.Println(res)
  fmt.Println(string(body))

}

OkHttpClient client = new OkHttpClient();

MediaType mediaType = MediaType.parse("application/json");
RequestBody body = RequestBody.create(mediaType, "{ \"editUrl\": \"https://api.grona.ai/v1/editor/launch?token=eyJhbGciOi...\" }");
Request request = new Request.Builder()
  .url("https://api.grona.ai/v1/variations/edit-link/validate")
  .post(body)
  .addHeader("Authorization", "Bearer <token>")
  .addHeader("Content-Type", "application/json")
  .build();

Response response = client.newCall(request).execute();

const url = 'https://api.grona.ai/v1/variations/edit-link/validate';
const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: '{"editUrl":"https://api.grona.ai/v1/editor/launch?token=eyJhbGciOi..."}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request POST \
  --url https://api.grona.ai/v1/variations/edit-link/validate \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "editUrl": "https://api.grona.ai/v1/editor/launch?token=eyJhbGciOi..." }'

Send an editor link you are holding. If it has not expired, it comes back unchanged with its original generatedAt and expiresAt. If it has expired, the response carries a new link with a full 15-minute lifetime. Either way the status is 200, and data.editUrl is the link to open, so you do not need to branch on valid.

A value that is not a Grona editor link returns 400. A link for a variation that no longer exists returns 404.

Authorizations

secretKeyBearer
secretKeyHeader

Request Body^required

application/json

object

editUrl

required

The whole link as Grona issued it, not the token inside it.

string format: uri

Example

{
  "editUrl": "https://api.grona.ai/v1/editor/launch?token=eyJhbGciOi..."
}

Responses

200

The link to open, either the one you sent or a new one.

application/json

object

data

required

object

valid

required

Whether the link you sent had not yet expired. Informational, for your logs.

boolean

refreshed

required

Whether Grona issued a new link.

boolean

editUrl

required

The link to open. The one you sent, byte for byte, or its replacement.

string format: uri

variationId

required

The variation the returned link opens.

string

generatedAt

required

ISO 8601 in UTC, with millisecond precision.

string format: date-time

expiresAt

required

ISO 8601 in UTC, with millisecond precision.

string format: date-time

meta

required

object

workspaceId

required

The workspace resolved from the secret key.

string

Examples

Not expired, returned unchanged

{
  "data": {
    "valid": true,
    "refreshed": false,
    "editUrl": "https://api.grona.ai/v1/editor/launch?token=eyJhbGciOi...",
    "variationId": "671a3c90e4b0a1f2c3d40012",
    "generatedAt": "2026-10-20T11:12:05.614Z",
    "expiresAt": "2026-10-20T11:27:05.614Z"
  },
  "meta": {
    "workspaceId": "65e8a1c47d2f9b03e6a15c42"
  }
}

Expired, replaced with a new link

{
  "data": {
    "valid": false,
    "refreshed": true,
    "editUrl": "https://api.grona.ai/v1/editor/launch?token=eyJhbGciOi...",
    "variationId": "671a3c90e4b0a1f2c3d40012",
    "generatedAt": "2026-10-20T13:41:09.327Z",
    "expiresAt": "2026-10-20T13:56:09.327Z"
  },
  "meta": {
    "workspaceId": "65e8a1c47d2f9b03e6a15c42"
  }
}

400

editUrl is missing or is not a Grona editor link. error.code is invalid_request.

application/json

object

error

required

object

code

required

Stable and machine-readable. Branch on this, and on the HTTP status for codes you do not know.

string

Allowed values: invalid_request unauthorized not_found conflict internal_error

message

required

Human-readable. The wording can change, so do not parse it.

string

Example

{
  "error": {
    "code": "invalid_request",
    "message": "`editUrl` is not a Grona editor link."
  }
}

401

The secret key is missing, malformed, unknown or revoked. error.code is unauthorized.

application/json

object

error

required

object

code

required

Stable and machine-readable. Branch on this, and on the HTTP status for codes you do not know.

string

Allowed values: invalid_request unauthorized not_found conflict internal_error

message

required

Human-readable. The wording can change, so do not parse it.

string

Example

{
  "error": {
    "code": "unauthorized",
    "message": "Missing or invalid API key."
  }
}

404

No variation with this id exists in the key’s workspace, for example because its campaign was deleted. error.code is not_found.

application/json

object

error

required

object

code

required

Stable and machine-readable. Branch on this, and on the HTTP status for codes you do not know.

string

Allowed values: invalid_request unauthorized not_found conflict internal_error

message

required

Human-readable. The wording can change, so do not parse it.

string

Example

{
  "error": {
    "code": "not_found",
    "message": "Variation not found."
  }
}

429

Too many requests. Retry with exponential backoff and jitter, and wait at least as long as Retry-After when it is present. Branch on the status code; the body is not guaranteed to use the error envelope.

Headers

Retry-After

string

How long to wait before retrying, in seconds or as an HTTP date.

500

Unexpected server error. error.code is internal_error. Retry with backoff; if it persists, contact support@grona.ai with the time of the request and the endpoint.

application/json

object

error

required

object

code

required

Stable and machine-readable. Branch on this, and on the HTTP status for codes you do not know.

string

Allowed values: invalid_request unauthorized not_found conflict internal_error

message

required

Human-readable. The wording can change, so do not parse it.

string

Example

{
  "error": {
    "code": "internal_error",
    "message": "Something went wrong on our side."
  }
}

503

Temporarily unavailable. Retry with exponential backoff and jitter, and wait at least as long as Retry-After when it is present. Branch on the status code; the body is not guaranteed to use the error envelope.

Headers

Retry-After

string

How long to wait before retrying, in seconds or as an HTTP date.

Check an editor link and refresh it if expired

Authorizations

Request Bodyrequired

Example

Responses

200

Examples

400

Example

401

Example

404

Example

429

Headers

500

Example

503

Headers

Request Body^required