Adobe Remove Protection From a PDF

arazzo: 1.0.1
info:
  title: Adobe Remove Protection From a PDF
  summary: Upload a protected PDF, unlock it with its password, poll the job, and fetch the result.
  description: >-
    Drives the Adobe PDF Services asynchronous remove-protection pipeline that
    strips password protection from a PDF when the current password is known.
    The workflow registers the protected PDF by requesting a pre-signed upload
    URI and asset ID, submits a removeProtection job with the unlock password,
    polls the job until it reports done, and resolves a download URI for the
    unprotected output. Each step spells out its request inline. The polling
    job identifier is supplied as a workflow input because the submit response
    exposes only an opaque Location header.
  version: 1.0.0
sourceDescriptions:
- name: pdfServicesApi
  url: ../openapi/adobe-pdf-services-api-openapi.yml
  type: openapi
workflows:
- workflowId: remove-protection
  summary: Unlock a password-protected PDF using its current password.
  description: >-
    Requests an upload slot for the protected PDF, submits a removeProtection
    job with the unlock password, polls job status until unlocking finishes,
    and retrieves the download URI for the unprotected PDF.
  inputs:
    type: object
    required:
    - accessToken
    - password
    - jobID
    properties:
      accessToken:
        type: string
        description: OAuth 2.0 bearer access token from Adobe IMS.
      password:
        type: string
        description: The current password used to unlock the protected PDF.
      jobID:
        type: string
        description: The job identifier taken from the removeProtection response Location header, used to poll status.
  steps:
  - stepId: requestUpload
    description: >-
      Request a pre-signed upload URI and asset ID for the protected PDF, which
      is then PUT to the returned uploadUri out of band.
    operationId: uploadAsset
    parameters:
    - name: Authorization
      in: header
      value: "Bearer $inputs.accessToken"
    requestBody:
      contentType: application/json
      payload:
        mediaType: application/pdf
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      assetID: $response.body#/assetID
      uploadUri: $response.body#/uploadUri
  - stepId: submitRemove
    description: >-
      Submit an asynchronous removeProtection job that unlocks the uploaded
      PDF. Returns 201 with an in-progress job status.
    operationId: removeProtection
    parameters:
    - name: Authorization
      in: header
      value: "Bearer $inputs.accessToken"
    requestBody:
      contentType: application/json
      payload:
        assetID: $steps.requestUpload.outputs.assetID
        password: $inputs.password
    successCriteria:
    - condition: $statusCode == 201
    outputs:
      status: $response.body#/status
  - stepId: pollStatus
    description: >-
      Poll the removeProtection job until it is no longer in progress, looping
      back while the status remains "in progress".
    operationId: getJobStatus
    parameters:
    - name: Authorization
      in: header
      value: "Bearer $inputs.accessToken"
    - name: operationType
      in: path
      value: removeprotection
    - name: jobID
      in: path
      value: $inputs.jobID
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      status: $response.body#/status
      outputAssetID: $response.body#/asset/assetID
    onSuccess:
    - name: stillRunning
      type: goto
      stepId: pollStatus
      criteria:
      - context: $response.body
        condition: $.status == "in progress"
        type: jsonpath
    - name: finished
      type: goto
      stepId: getOutput
      criteria:
      - context: $response.body
        condition: $.status == "done"
        type: jsonpath
  - stepId: getOutput
    description: >-
      Resolve a pre-signed download URI for the unprotected output PDF.
    operationId: getAsset
    parameters:
    - name: Authorization
      in: header
      value: "Bearer $inputs.accessToken"
    - name: assetID
      in: path
      value: $steps.pollStatus.outputs.outputAssetID
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      downloadUri: $response.body#/downloadUri
  outputs:
    sourceAssetID: $steps.requestUpload.outputs.assetID
    outputAssetID: $steps.pollStatus.outputs.outputAssetID
    downloadUri: $steps.getOutput.outputs.downloadUri