Files
gristlabs_grist-core/app/common
Paul Fitzpatrick dd8d2e18f5 (core) add an access token mechanism to help with attachments in custom widgets
Summary:
With this, a custom widget can render an attachment by doing:
```
const tokenInfo = await grist.docApi.getAccessToken({readOnly: true});
const img = document.getElementById('the_image');
const id = record.C[0];  // get an id of an attachment
const src = `${tokenInfo.baseUrl}/attachments/${id}/download?auth=${tokenInfo.token}`;
img.setAttribute('src', src)
```

The access token expires after a few mins, so if a user right-clicks on an image
to save it, they may get access denied unless they refresh the page. A little awkward,
but s3 pre-authorized links behave similarly and it generally isn't a deal-breaker.

Test Plan: added tests

Reviewers: dsagal

Reviewed By: dsagal

Subscribers: dsagal

Differential Revision: https://phab.getgrist.com/D3488
2022-07-19 11:55:18 -04:00
..
2022-06-17 21:53:20 +02:00
2022-02-19 09:46:49 +00:00
2021-09-16 10:06:04 -04:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00
2022-02-19 09:46:49 +00:00
2022-01-13 11:10:17 +01:00
2020-07-21 20:39:10 -04:00
2022-07-04 10:42:40 -04:00
2022-05-09 21:44:57 +02:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00
2022-06-27 16:10:10 -04:00
2022-07-04 10:42:40 -04:00
2020-07-21 20:39:10 -04:00
2022-04-27 22:21:55 +02:00
2022-07-04 10:42:40 -04:00
2020-07-21 20:39:10 -04:00
2022-02-19 09:46:49 +00:00
2022-06-29 18:28:37 +02:00
2022-07-14 12:09:56 +02:00
2020-07-21 20:39:10 -04:00
2022-02-19 09:46:49 +00:00
2022-03-12 14:34:46 -08:00
2020-07-21 20:39:10 -04:00
2020-07-23 16:21:08 -04:00
2020-07-21 20:39:10 -04:00
2020-09-29 18:57:56 -04:00
2022-07-04 10:42:40 -04:00
2021-07-20 15:17:03 +02:00