|
|
@@ -65,7 +65,21 @@ Other improvements in docs:
|
|
|
|
|
|
⚠️**breaking**
|
|
|
|
|
|
-We removed the need to type `uppy.run()` in [#793](https://github.com/transloadit/uppy/pull/793). You now only have to call `.use()` for the plugins that you need (as usual), and everything is then ran automatically. It comes with a few tradeoffs but we were getting a big amount of support tickets where people forgot to conclude with `.run()`, and we saw a chance to reduce boilerplate, so we decided to go ahead and pave the cowpath.
|
|
|
+We removed the need to type `uppy.run()` in [#793](https://github.com/transloadit/uppy/pull/793). You now only have to call `.use()` for the plugins that you need (as usual), and everything is then run automatically. It comes with a few tradeoffs but we were getting a big amount of support tickets where people forgot to conclude with `.run()`, and we saw a chance to reduce boilerplate, so we decided to go ahead and pave the cowpath.
|
|
|
+
|
|
|
+## Authorisation tokens in Local Storage
|
|
|
+
|
|
|
+⚠️**breaking**
|
|
|
+
|
|
|
+Authorisation tokens from Uppy Server are now stored in local storage as opposed to cookies. Two primary reasons for this decision are:
|
|
|
+
|
|
|
+1. It avoids CSRF issues which are present when using cookies
|
|
|
+2. It allows for less stringent [CORS policies enforced by browsers](https://github.com/transloadit/uppy/issues/803#issuecomment-386257515), since we are no longer sending cookie credentials via Ajax requests
|
|
|
+
|
|
|
+This is a breaking change because it requires that the Uppy Server version should also be updated to **0.13.x** otherwise there could be unexpected behaviour
|
|
|
+
|
|
|
+What's more about the Authorisation tokens is that they are now encrypted on the Server before being sent down to the client. Subsequent requests from the client will then send the token to the Server via headers(not via cookies anymore).
|
|
|
+
|
|
|
|
|
|
## Other Cool Changes
|
|
|
|
|
|
@@ -76,6 +90,10 @@ We removed the need to type `uppy.run()` in [#793](https://github.com/transloadi
|
|
|
- Improvement: Pass `allowedFileTypes` and `maxNumberOfFiles` to `input[type=file]` to add restrictions to the system file picking dialog too (#814)
|
|
|
- Improvement: merge meta data when add file (#810)
|
|
|
- Fix: More robust failure handling for Transloadit, closes #708 (#805)
|
|
|
+- Feature: display username/email in provider view
|
|
|
+- Feature: show message for empty provider files
|
|
|
+- Server: Allow custom headers to be set for remote multipart uploads
|
|
|
+- Server: Add type to metadata as `filetype`
|
|
|
|
|
|
⚠️**heads up**
|
|
|
|
Ifedapo .A. Olarewaju