wordpress-mobile / wordpress-mobile/WordPress-Android
Use the auth cookie for loading image from the upload directory
Nobody has claimed this yet.
- Dominant language
- Kotlin
- Stars
- 3.2k
- Forks
- 1.4k
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 69
Description
Expected behavior
When loading from the upload directory (e.g., for loading previewing already downloaded pictures), the app should use the auth cookie. This is important when using a plugin (and some URL rewriting) which makes the website private, including files in the upload directory.
Actual behavior
The cookie is not used, and the pictures don't show up in the app.
Steps to reproduce the behavior
- Make a private WordPress instance
- Make the upload directory private thanks to the dl-file.php script published here, and with URL rewriting.
- Log in with the Andoid app, and show pictures already loaded in the site.
Tested on [device], Android [version], WPAndroid [version]
Tested on realme X50 Pro 5G, Android 12, WPAndroid 21.7
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are named. Start by tracing how the Android app loads images from the WordPress upload directory and whether authenticated requests include the auth cookie; reproduce the private-site setup described in the issue, and consider the work done when previously uploaded pictures display while logged in.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, kotlin
- Domain
- authentication, mobile
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100