react-native-cloudinary-unsigned

This module helps you to send files to Cloudinary through an upload profile.

Getting started

$ npm install react-native-cloudinary-unsigned --save

Usage

// Import library into your project
import RNCloudinaryUnsigned from "react-native-cloudinary-unsigned";

// Declare your credentials
const CLOUDINARY_CLOUD_NAME = "xxxxxx";
const CLOUDINARY_UPLOAD_PROFILE_NAME = "xxxxxx";
RNCloudinaryUnsigned.init(CLOUDINARY_CLOUD_NAME, CLOUDINARY_UPLOAD_PROFILE_NAME)
  .then(res => console.log(res))
  .catch(err => console.error(err));

// Call function to upload or remove image
export default class App extends Component {
  // Upload an image
  uploadImage = file => {
    RNCloudinaryUnsigned.upload(file)
      .then(res => console.log(res))
      .catch(err => console.error(err));
  };
  // Delete an image
  deleteImage = token => {
    RNCloudinaryUnsigned.delete(token)
      .then(res => console.log(res))
      .catch(err => console.error(err));
  };
}

API

upload(filepath: string, filename?: string): Promise<void>

Upload the file to Cloudinary using at least filepath parameter.

It could be useful to add the filename optional parameter that will act as a prefix to final file name. In your preset parameters, you might set Use filename and Unique filename to Yes.

delete(token: string): Promise<void>

Delete the uploaded file using the delete_token returned in the upload response. After 10 minutes has passed, the image cannot be deleted from the client side.

How safe / secure is it to use unsigned upload from mobile clients?

The only "risk" in using unsigned uploads with Cloudinary is the possibility that another person will view the source code of your uploader, replicate the configuration and issue uploads from another place onto your account.

However, the following is worth mentioning:

• This will "only" allow them to initiate unsigned-uploads to your account (may result with a certain Storage/Transformations quotas abuse).
• This will NOT allow anyone to Delete / Edit / Overwrite any of your existing content on the account. A list of supported unsigned-upload options is available here.
• As a safety measure, from time to time, you may want to change your upload-preset's name (can be done via the account settings) to reduce the possibility of someone using your configuration without your permission.
• Finally we must say that until the writing of these lines we haven't heard of anyone of our customers experiencing this kind of offense.