I am not sure what you mean. I tried a few combinations of things, none of which work.
Here are some combos that did not work.
@Jici - Ideally, the file would be originally taken from xano with an auth header for the user.