SaaS Document Uploads: Choosing Between Server Relay and Presigned URLs

·1 views

The article argues that private SaaS documents should go through a server relay for small files, or use backend-authorized presigned uploads for larger ones. It contends that the application, not the browser, must own decisions about object keys, tenant ownership, and record completion. Presigned uploads need a backend confirmation step that verifies the stored object before a document is marked ready. Direct browser-to-storage uploads are rejected as a default because CORS cannot be configured through the available storage workflow and must be verified separately. Clients should handle retries and keep pending or failed states visible rather than showing an optimistic completion.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

AI Tools Ease Audit Firms' Voucher Matching, Reconciliation and Year-End Closing

Audit teams often lose much of busy season to routine tasks such as matching vouchers to ledger entries, reconciling balances, and preparing closing schedules. The author, a Lahore-based engineer, describes building AI tools for these jobs and argues they must follow strict design rules. Extracted invoice fields are checked against validation rules before reaching the ledger, and most items are cleared through exact and fuzzy matching, with the model used only for leftover cases. Every suggestion is logged with a reviewer, timestamp and source document to create an audit trail, and closing steps are tracked as tasks with automatic checks.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Build a Keyboard-Driven Test Grader in Plain JavaScript

A DEV Community tutorial walks through building a test grader in a single HTML file with no dependencies. Users set the question count once, then record wrong answers with a button or keyboard key while the percentage and letter grade update instantly. The core grading logic lives in a pure function that clamps wrong-answer counts, compares scores using integer cross-multiplication to avoid floating-point errors, and sorts custom grade scales. The page also renders a table of every possible score as a quick chart. The guide additionally covers how to avoid common keyboard shortcut bugs, such as blocking single-letter hotkeys when modifier keys are held or when the user is typing in an input field.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Court Staffer Recounts Three AI Conference Talks and Her Discomfort With Public Speaking

A court professional describes how a 2025 decision to build with AI led to speaking invitations at three court conferences in Albuquerque, Los Angeles, and Riverside. She says she was the only attendee from her court at the first event, and the pressure grew with each talk, especially at the Los Angeles Superior Court, the country's largest trial court. The most recent talk, delivered at a Southern Region Finance Officers Meeting, was preceded by two months of preparation, and she rehearsed by listening to an audio version of her notes. Despite positive audience reaction, she says she felt relief rather than accomplishment once it ended.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Choosing Centralized Logging for Next.js and Node.js Startup Apps by Signal Value

The article argues that startups should pick a centralized logging service based on how many useful decisions it supports per ingested byte, rather than on the lowest advertised price. For a Node.js customer-support agent, it recommends one structured event per model call, one summary per agent run, and logging of every error. It advises starting with a managed log service behind a thin application-owned transport interface, selecting an EU deployment, and benchmarking with real traffic. Correlation is handled through trace and span identifiers following the W3C Trace Context standard, and personal ticket text is kept out of routine logs to align with GDPR data minimization. The author proposes testing candidate services by replaying an identical 1,000-event fixture and checking how much configuration is needed to answer the same operational questions.

0 comments Read more at DEV Community