public HttpResponseMessage Download() { var url = JwtHelper.DecodeUrl(this.Request.Headers.Authorization?.Parameter); return(!string.IsNullOrEmpty(url) ? new HttpResponseMessage { Content = new StreamContent(File.OpenRead(HostingEnvironment.MapPath(url))), } : new HttpResponseMessage(HttpStatusCode.NotFound)); }