This weblog publish summarizes Drupal Development Service 572 feedback spanning 5 years and a pair of months to get REST file add support in #1927648 dedicated. Many because of everybody who contributed! From February 2013 till Drupal Development Service finish of March 2017, challenge #1927648 principally … lingered. On April 3 of 2017, damiankloip posted an preliminary patch for an strategy he’d been engaged on for some time, because of Acquia (my employer) sponsoring his time. Precisely one yr later his work is dedicated to core. Formed by Drupal Development Service enter of dozens of individuals! Simply *take a look at that commit message!* Background Drupal 10 Upkeep and Assist Service API-First Drupal 10 Upkeep and Assist Service file uploads!. Little occurred between February 2013 (opening of challenge) and November 2015 (delivery of  8). Between February 2013 and April 2014, solely half a dozen feedback have been posted, till moshe weitzman aptly mentioned Nonetheless a gaping gap in our REST support. Come on Internets …. Drupal Development Service first proof-of-concept patch adopted in August 2014 by juampynr, however was nonetheless very tough. A good quantity of iteration occurred that month, between juampynr and Arla. It used base64 encoding, which implies it wanted 33% extra bytes on Drupal Development Service wire to switch a file than if it have been transmitted in binary slightly than base64. Then once more a interval of silence. Keep in mind that this was round Drupal Development Service time after we have been making an attempt to get 8 to a shippable state Drupal 10 Upkeep and Assist Service Drupal Development Service #1 precedence was to stabilize, repair important bugs. To not add lacking options, irrespective of how necessary. To Drupal Development Service better of my information, Drupal Development Service funding for many who initially labored on 8’s REST API had additionally dried up. In Could 2015, one other flurry of exercise occurred, this time fueled by marthinal. Remark #100 was posted. Notice that every one patches up till this level had zero validation logic! Which in fact was an enormous safety danger. marthinal is Drupal Development Service first to state that that is actually vital, and does a primary iteration of that. Just a few months of silence, after which once more progress in September, round Con Barcelona 2015. dawehner remarked in a assessment on Drupal Development Service lack of exams for Drupal Development Service validation logic. In February 2021 I identified that I’m lacking integration exams that show Drupal Development Service patch really works. To which Berdir responded that we’d first want to determine learn how to cope with File entity sort entry management! In the meantime, marthinal works on Drupal Development Service integration check protection in 2021. And … we reached remark #200. In Could 2021, I did a deep assessment, and located many issues. Fast iterations repair these issues! However then damiankloip identified that regardless of Drupal Development Service challenge being about Drupal Development Service basic File (de)serialization downside, it really solely labored for Drupal Development Service HAL normalization. We additionally ended up realizing that Drupal Development Service challenge thus far was about stand-alone File entity creation, though these entities can’t be seen stand-alone nor can they be created stand-alone by Drupal Development Service current UI Drupal 10 Upkeep and Assist Service they’ll solely be created to be referenced from file fields. And consequently, we’ve got no entry management logic for this but, neither is it clear how entry management ought to work; neither is it how validation ought to work! Berdir defined this effectively in remark 232. This lead us to discover shifting components of https Drupal 10 Upkeep and Assist Service//www.Drupal 10.org/venture/file_entity into core (which might be a tough blocker). Drupal Development Service challenge then went quiet once more. In July 2021, garphy identified that enormous file uploads nonetheless weren’t but supported. Some work round that occurred. In September, kylebrowning careworn this once more, and supplied a extra detailed rationale. Then … silence. Till damiankloip posted remark #281 on April 3, 2017. Acquia was sponsoring him to work on this challenge. Damian is Drupal Development Service maintainer of Drupal Development Service serialization.Drupal 10 module part and due to this fact in fact wished to see this challenge get fastened. My employer Acquia agreed with my proposal to sponsor Damian to work on REST file add support. As a result of after 280 feedback, some basic capabilities are nonetheless absent Drupal 10 Upkeep and Assist Service this was such a fancy challenge, with so many considerations and must steadiness, that it was nigh inconceivable to complete it with out devoted time.To get this going, I requested Damian to take a look at Drupal Development Service documentation for a bunch of well-known websites to look at how they deal with file uploads. I additionally requested him to learn Drupal Development Service complete challenge. Mixed, this could give him an excellent psychological map of learn how to strategy this. #281 was a PoC patch that solely barely labored however did support binary (non-base64) uploads. damiankloip articulated Drupal Development Service important issues but to be discovered Drupal 10 Upkeep and Assist Service validation and entry checking. Berdir chimes in together with his perspective on that in #291 … by which he mainly outlines what ended up in core! In addition to Berdir, dagmar, dawehner, garphy, dabito, ibustos all chimed in and influenced Drupal Development Service patch. Berdir, damiankloip and I had a gathering about learn how to cope with validation, and I disagreed with with each of them. And turned out to be very incorrect! Extra suggestions is supplied by Drupal Development Service now acquainted names, and Drupal Development Service intense progress/exercise continues for 2 months, till remark #376! Damian bought caught on check protection — and since I’d written most of Drupal Development Service REST check protection in Drupal Development Service previous months, it made sense for me to select up Drupal Development Service baton from Damian. So I did that in July 2017, simply making trivial modifications that have been exhausting to determine. Damian then continued once more, increasing check protection and discovering a core bug in Drupal Development Service course of! And so remark #400 was reached! At Drupal Development Service starting of August, Drupal Development Service patch was trying fairly good, so I did an architectural assessment. For Drupal Development Service first time, we realized that we first wanted to repair Drupal Development Service normalization of File entities earlier than this might land. And plenty of extra edge circumstances should be examined for us to be assured that there have been no safety vulnerabilities. blainelang did handbook testing and posted tremendous useful suggestions based mostly on his expertise. Blaine and Damian tag-teamed for an excellent whereas, then graphy chimed in once more, and we entered September. Then dawehner chimed in as soon as extra, adopted by tedbow. On September 6 2017, in remark #452 I marked Drupal Development Service challenge postponed on two different points, stating that it in any other case seemed tantalizingly near RTBC. aheimlich discovered an issue no person else had noticed but, which Damian fastened. Silence whereas Drupal Development Service different points get fastened … and December 21 2017 (remark #476), it lastly was unblocked! A number of detailed critiques by tedbow, gabesullice, Berdir and myself adopted, in addition to rerolls to handle them, till I lastly RTBC‘d it … in remark #502 on February 1 2021. Resulting from Drupal Development Service pending 8.5 launch, Drupal Development Service challenge principally sat ready in RTBC for about two months … after which bought dedicated on April 3 2021!!! Damian’s first remark (preceded by many hours of analysis) was on April 3, 2017. Precisely one yr later his work is dedicated to core. Formed by Drupal Development Service enter of dozens of individuals! Simply take a look at that commit message! API Acquia Drupal 10 Growth and Assist