Changelog

plone.pgthumbor

0.1.0 (unreleased)

  • Initial implementation: Thumbor URL generation for Plone image scales.

  • Add 3-segment authenticated Thumbor URLs for access-controlled content. Public images use the existing 2-segment format (zoid/tid); restricted images append a content_zoid segment so the Thumbor auth handler can verify Plone permissions. Paranoid mode forces auth URLs for all images.

  • Add @thumbor-auth REST API endpoint for Thumbor auth handler subrequests. Checks allowedRolesAndUsers via a direct PG query against the pgcatalog index – no ZODB object loading required.

  • Add Thumbor settings control panel (@@thumbor-settings) with autoregistering getContent() fallback for fresh installs. GenericSetup profile registers controlpanel.xml and registry.xml.

  • Add nginx reverse proxy and auth handler integration to Docker example. Thumbor runs behind nginx at /thumbor/; Plone generates public-facing URLs through the nginx endpoint.

zodb-pgjsonb-thumborblobloader

0.2.0

  • Add AuthImagingHandler for Plone access control via @thumbor-auth REST service. 3-segment URLs (blob_zoid/tid/content_zoid) verify access before delivery; 2-segment URLs are served directly.

  • Extend _parse_path to accept 3-segment authenticated URL format.

0.1.0

  • Initial release: Thumbor loader for zodb-pgjsonb blob_state.