KumiSystems/Chatwoot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Feat: authenticate direct upload (#4160)

Browse source
This commit is contained in:
Tejaswini Chile 2022-03-16 13:54:18 +05:30 • committed by GitHub
parent 796a7805db
commit 207a03155e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
12 changed files with 174 additions and 57 deletions
Download patch file Download diff file Expand all files Collapse all files

12
app/javascript/widget/components/ChatAttachment.vue
View file

@ -3,7 +3,7 @@
:size="4096 * 2048"
:accept="allowedFileTypes"
:data="{
direct_upload_url: '/rails/active_storage/direct_uploads',
direct_upload_url: '/api/v1/widget/direct_uploads',
direct_upload: true,
}"
@input-file="onFileUpload"
@ -66,11 +66,15 @@ export default {
this.isUploading = true;
try {
if (checkFileSizeLimit(file, MAXIMUM_FILE_UPLOAD_SIZE)) {
const { websiteToken } = window.chatwootWebChannel;
const upload = new DirectUpload(
file.file,
'/rails/active_storage/direct_uploads',
null,
file.file.name
`/api/v1/widget/direct_uploads?website_token=${websiteToken}`,
{
directUploadWillCreateBlobWithXHR: xhr => {
xhr.setRequestHeader('X-Auth-Token', window.authToken);
},
}
);
upload.create((error, blob) => {