feat(webapp): upload and crop a profile picture from the account page - #4802

Open

kathiekiwi wants to merge 25 commits into

mainfrom

feat/profile-photo-upload

Commits on Aug 27, 2026

feat(webapp): add a profile photo editor modal with circular crop and zoom
kathiekiwi
committed
62060b8
feat(webapp): store profile photos in S3 and serve them presigned
kathiekiwi
committed
01619a9
feat(webapp): change your profile picture from the account page
kathiekiwi
committed
8068b39
feat(webapp): delete the previous profile photo after a new one is stored
kathiekiwi
committed
9245092
feat(webapp): verify profile photo bytes and return fetchable avatar URLs
kathiekiwi
committed
41dbfad
fix(webapp): size the avatar image to its container
kathiekiwi
committed
569c46c
fix(webapp): allow the avatar object store origin in the image policy
kathiekiwi
committed
c25c7b0
fix(webapp): reject unsafe hosts when deriving an image policy origin
kathiekiwi
committed
cefdc34
feat(webapp): remove your profile photo from the account page
kathiekiwi
committed
b4cf0ae
feat(webapp): show, remove and drag-drop the profile picture in the photo editor
kathiekiwi
committed
5aca646
feat(webapp): show and remove the current profile picture from the account page
kathiekiwi
committed
4516205
fix(webapp): hide the remove button once a new profile picture is picked
kathiekiwi
committed
8128436
feat(webapp): serve avatar bytes from our own origin for re-cropping
kathiekiwi
committed
89421bc
feat(webapp): load the existing profile picture straight into the cropper
kathiekiwi
committed
a651d06
feat(webapp): show a tooltip on the account page profile picture
kathiekiwi
committed
fea2e6c
feat(webapp): show the saved profile picture statically in the photo editor
kathiekiwi
committed
820a2a7
fix(webapp): move the remove button to the footer's right slot
kathiekiwi
committed
a614903
fix(webapp): drop refused uploads and block avatar writes while impersonating
kathiekiwi
committed
3eac9a3
fix(webapp): fall back to the picker when the saved photo fails to load
kathiekiwi
committed
237e84d
refactor(webapp): build the avatar routes with the dashboard route builders
kathiekiwi
committed
1a083d3

Navigation Menu

Uh oh!

Uh oh!

feat(webapp): upload and crop a profile picture from the account page - #4802

feat(webapp): upload and crop a profile picture from the account page#4802
kathiekiwi wants to merge 25 commits into
mainfrom
feat/profile-photo-upload

Commits on Aug 27, 2026

feat(webapp): add a profile photo editor modal with circular crop and zoom

feat(webapp): store profile photos in S3 and serve them presigned

feat(webapp): change your profile picture from the account page

feat(webapp): delete the previous profile photo after a new one is stored

feat(webapp): verify profile photo bytes and return fetchable avatar URLs

fix(webapp): size the avatar image to its container

fix(webapp): allow the avatar object store origin in the image policy

fix(webapp): reject unsafe hosts when deriving an image policy origin

feat(webapp): remove your profile photo from the account page

feat(webapp): show, remove and drag-drop the profile picture in the photo editor

feat(webapp): show and remove the current profile picture from the account page

fix(webapp): hide the remove button once a new profile picture is picked

feat(webapp): serve avatar bytes from our own origin for re-cropping

feat(webapp): load the existing profile picture straight into the cropper

feat(webapp): show a tooltip on the account page profile picture

feat(webapp): show the saved profile picture statically in the photo editor

fix(webapp): move the remove button to the footer's right slot

fix(webapp): drop refused uploads and block avatar writes while impersonating

fix(webapp): fall back to the picker when the saved photo fails to load

refactor(webapp): build the avatar routes with the dashboard route builders

Commits on Aug 28, 2026

feat(webapp): give profile pictures their own object store

fix(webapp): only show uploaded photos in the profile picture editor

fix(webapp): hide profile picture uploads when no avatar store is configured

fix(webapp): reject protocol-relative avatar urls in the photo editor

fix(webapp): sign avatar store requests as s3 and ignore blank config