chore: Martin's revision

api/src/backend/api/v1/views.py

@@ -1507,6 +1507,9 @@ class ProviderViewSet(BaseRLSViewSet):
                 description="PDF file containing the threatscore report"
             ),
             202: OpenApiResponse(description="The task is in progress"),
+            401: OpenApiResponse(
+                description="API key missing or user not Authenticated"
+            ),
             403: OpenApiResponse(description="There is a problem with credentials"),
             404: OpenApiResponse(
                 description="The scan has no threatscore reports, or the threatscore report generation task has not started yet"

ui/actions/scans/scans.ts

@@ -348,13 +348,22 @@ export const getThreatscoreReport = async (scanId: string) => {
       );
     }
 
-    const arrayBuffer = await response.arrayBuffer();
-    const base64 = Buffer.from(arrayBuffer).toString("base64");
+    const filename = `scan-${scanId}-threatscore.pdf`;
+
+    const blob = await response.blob();
+    const url = URL.createObjectURL(blob);
+    const a = document.createElement("a");
+    a.href = url;
+    a.download = filename;
+    document.body.appendChild(a);
+    a.click();
+    document.body.removeChild(a);
+    URL.revokeObjectURL(url);
 
     return {
       success: true,
-      data: base64,
-      filename: `scan-${scanId}-threatscore.pdf`,
+      data: url,
+      filename,
     };
   } catch (error) {
     return {