So, if you don’t have the ?auth=XXX for showing the image (this is sent via SDK) you can request the content of the file via GET and using your Api-Token.
Thanks for your reply
the is issue is that when I get all message list using platform API the file exist without auth, and when I upload file using js SDK its response exist file url with auth