There is an API to start and run reports and check the status of a running report and when status=complete it will even give the download url of the report file:  https://canvas.instructure.com/doc/api/account_reports.html

When attempting to download the report file using the API developer key authentication, it does not authenticate.

Now I'm stuck, how do I authenticate to programmatically download the report file?  I've tried getting a refresh_token to use via google sso with no success.  Is there some known way to authenticate programmatically for the report download URLs?

BTW, the download URLs simply end up redirecting through to insgate cloud files, why not provide the direct link in the API instead of a link that requires user authentication?

Why not provide a download link that allows developer key authentication before the redirect?