Accessing attachments
We are removing cookie support from the API server, meaning that direct GET
requests to the API server will result in 401 Unauthorized
unless:
- loaded through axios with access token in
Authorization
header (OK), or -
<form
with a<input type="hidden" name="_access_token" value={ token } />
, - or maybe
<img src={ 'whatever?_access_token=${ token }' }
(🤷 can't use ` in this line)
This change mostly affects attachments and the image gallery, and requires updating to include the access token in parameters, especially for downloading stuff. Downloading should be done with a POST
anyway (API support?)