ExpensesDelete receipt images from an employee expense

Delete receipt images from an employee expense

Removes one or more receipt attachments from an employee expense and deletes the files from storage.

Pass each attachment to remove as an imageUrl query parameter (repeat it for several). Despite the name, this route also deletes PDFs.

Use it to:

  • Expense app letting the employee remove a wrong receipt photo before submitting
  • Receipt integration replacing a receipt: delete the old URL, then attach the new image

Not for:

  • Deleting the whole expense — DELETE /v1/employee-expense/{employeeExpenseID} (also removes every receipt)

Behaviour:

  • Not idempotent.
  • Repeating a successful call fails with 37684 (the URL is no longer on the expense).
  • Safe to retry only under a condition. After a lost response, GET the expense: a URL that is gone was deleted.
  • Duplicates: A URL repeated in one call fails on its second occurrence (37684) after the first was deleted.
  • On failure: URLs before the failing one stay deleted (each is saved separately).
  • Changes are visible to the next read immediately.
  • Batch: partial

Call first: GET /v1/employee-expense/{employeeExpenseID}

Next: POST /v1/employee-expense/{employeeExpenseID}/image

See also: DELETE /v1/employee-expense/{employeeExpenseID}/file

Not yet documented: examples.

curl -X DELETE "https://app3.timelog.com/your-account/api/v1/employee-expense/123/image?imageUrl=%5B%22example_string%22%5D" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_TOKEN"
"null"
DELETE
/v1/employee-expense/{employeeExpenseID}/image
DELETE
Base URLstring

Target server for requests. Edit to use your own host.

Bearer Token
Bearer Tokenstring
Required

OAuth 2.0 bearer token, sent as Authorization: Bearer <token>. JWT and reference tokens are both accepted. The token must carry the required scope (default tlp). The token's sub claim is the acting user. A token WITHOUT sub (client-credentials) acts as the system service user. If the sub user cannot log in (inactive, locked, deleted), the request is rejected with 401 — it is no longer let through without a user. > Not yet documented: how to obtain a token. > Not yet documented: token lifetime.

OAuth 2.0 bearer token, sent as Authorization: Bearer <token>. JWT and reference tokens are both accepted. The token must carry the required scope (default tlp). The token's sub claim is the acting user. A token WITHOUT sub (client-credentials) acts as the system service user. If the sub user cannot log in (inactive, locked, deleted), the request is rejected with 401 — it is no longer let through without a user. > Not yet documented: how to obtain a token. > Not yet documented: token lifetime.
path
employeeExpenseIDinteger
Required

The expense.

Format: int32
query
imageUrlarray

An attachment URL of this expense (from ImageUrls or FileUrls), URL-encoded. Repeat the parameter for several. Matched on scheme + host + path; the query string is ignored. Default: none — the call then does nothing and returns 200

Request Preview
Response

Response will appear here after sending the request

Authentication

header
Authorizationstring
Required

Bearer token. OAuth 2.0 bearer token, sent as Authorization: Bearer <token>. JWT and reference tokens are both accepted. The token must carry the required scope (default tlp).

The token's sub claim is the acting user. A token WITHOUT sub (client-credentials) acts as the system service user. If the sub user cannot log in (inactive, locked, deleted), the request is rejected with 401 — it is no longer let through without a user.

Not yet documented: how to obtain a token.

Not yet documented: token lifetime.

Path Parameters

Query Parameters

imageUrlarray

An attachment URL of this expense (from ImageUrls or FileUrls), URL-encoded. Repeat the parameter for several. Matched on scheme + host + path; the query string is ignored.

Default: none — the call then does nothing and returns 200

Responses

*Success without content: HTTP 200 with the literal JSON body null. Body is the JSON literal null.

Order: none

Empty result: none*