Le dimanche 8 novembre 2026, 14:58:37 heure normale d’Europe centrale Matthew Wild a écrit :
Hi folks,
We had a brief discussion at the current XMPP London sprint about allowing a user to delete their uploaded files. I know I've been thinking about this for a long time, and I think there have been prior discussions (on this list?) about potential approaches. Today we discussed options, and picked the one that seems feasible to implement in the codebases represented here.
The PR for the XEP is at https://github.com/xsf/xeps/pull/1584
The submitted approach uses an iq request to the XMPP server with the GET URL of the file to be deleted.
Other approaches discussed in the past include using the HTTP DELETE verb (e.g. on the slot's PUT URL or the service could return a special deletion URL in the slot response). This approach fails because the client requesting the deletion might not be the same client that requested the slot. It therefore won't have access to the secret URLs.
The downside is that the XMPP server has to keep track of this, which I know will impact Prosody at least, where we have support for external upload services, and we don't necessarily track files past the initial slot request/response. But I'm confident we can find solutions, and implementing deletion is important.
The iq is in a new namespace, so it's easily discoverable and backwards-compatible.
I also know that there are other more generic file management proposals/protocols around, and I don't think adding this stanza to XEP-0363 necessarily competes with those.
Regards, Matthew _______________________________________________ Standards mailing list -- standards@xmpp.org To unsubscribe send an email to standards-leave@xmpp.org
Hi Matthew, Are you aware that there is already a way to delete uploaded files with XEP-0498 (https://xmpp.org/extensions/xep-0498.html#well-known)? Please don't duplicate features again, I already implement XEP-0498, it works well, and it notifies all devices of deletion. It's relatively easy to implement for servers, and trivial for clients. And you can see which files have been uploaded. Also, it's not restricted to HTTP (and deletion should not be restricted to HTTP Uploaded files). Regards, Goffi