2024 Jopro Development Journal

All images are now secured through the /api/images path. This only allows access to images that are scoped to the owner's notebooks or to public notebooks. This is super important as this now allows for images to be private whereas previously they had a public ACL and were served directly from S3.

While this is definitely less optimal for public notebooks, this is not a priority case we are optimizing for and ensuring uploaded images are private is more of a concern. We can always optimize later.

Of not significant interest since there is mostly test data, the changes also ensure backwards compatibility with existing images in all notebooks. Only new images are marked as private and then served through the /api/images pathway.