GET /api/getPolicy/{policyId}
Authorization: Bearer {token}

{
  "success": true,
  "policy": {
    "policyId": "0xabc123...",
    "cid": "QmXyz...",
    "sender": "0x742d...",
    "recipient": "0x1234...",
    "expiry": 1708608000,
    "maxAttempts": 3,
    "attempts": 1,
    "contentType": "file",
    "fileName": "document.pdf",
    "fileSize": 1048576,
    "valid": true,
    "createdAt": "2025-02-22T10:00:00Z"
  }
}

{
  "error": "Policy expired",
  "expiry": 1708608000
}

{
  "error": "Policy not found"
}

{
  "error": "Unauthorized"
}

{
  "error": "Max attempts reached",
  "attempts": 3,
  "maxAttempts": 3
}

async function getPolicy(policyId: string) {
  const response = await fetch(`/api/getPolicy/${policyId}`, {
    headers: {
      'Authorization': `Bearer ${token}`,
    },
  });

  if (!response.ok) {
    const error = await response.json();
    throw new Error(error.error);
  }

  return await response.json();
}

// Usage
const { policy } = await getPolicy('0xabc123...');
console.log(`CID: ${policy.cid}`);
console.log(`Expires: ${new Date(policy.expiry * 1000)}`);

curl https://app.shieldhq.xyz/api/getPolicy/0xabc123... \
  -H "Authorization: Bearer $TOKEN"

async function accessContent(policyId: string, secretKey: string) {
  // 1. Get policy metadata
  const { policy } = await getPolicy(policyId);

  // 2. Authenticate with SIWE (recipient)
  const token = await authenticate(recipientAddress);

  // 3. Log access on-chain
  await logAccessAttempt(policyId);

  // 4. Fetch encrypted content from IPFS
  const encrypted = await fetchFromIPFS(policy.cid);

  // 5. Decrypt with secret key
  const decrypted = await decryptContent(encrypted, secretKey);

  return decrypted;
}

try {
  const { policy } = await getPolicy(policyId);
} catch (error) {
  switch (error.message) {
    case 'Policy not found':
      // Invalid policy ID
      break;
    case 'Policy expired':
      // Link has expired
      break;
    case 'Max attempts reached':
      // No more access allowed
      break;
    case 'Policy revoked':
      // Sender revoked access
      break;
    default:
      // Network or server error
  }
}