Media Proxy 1.1.0

Adds exact-origin HTTP Basic Auth for protected media sources. Authenticated files are fetched server-side with remote redirects disabled, streamed to a temporary uploads file, and published atomically. Includes controlled cleanup for remote and local failures plus updated local and production configuration guidance.

Media Proxy 1.0.0

Installation

Add the repository as a Composer VCS source and install the stable constraint:

composer require whitespace-se/wp-plugin-media-proxy:^1.0

Existing consumers of dev-main can upgrade to ^1.0; the tag contains the
same verified runtime behavior as commit 0497dd2 plus stable package metadata,
documentation and regression coverage.

Highlights

• Validates both /app/uploads and /wp-content/uploads request paths.
• Maps the local uploads prefix independently from the remote uploads root.
• Supports WordPress multisite upload directories without duplicating
  sites/<blog-id>.
• Publishes fetched files atomically with shared-storage-compatible
  permissions.
• Redirects a successful fetch to the newly available static upload URL,
  producing the expected 307 → 302 → 200 first-request chain under
  OpenLiteSpeed.

Compatibility and limits

This release is verified in Municipio Cloud reference environments using PHP
8.3 and WordPress 6.x and requires PHP 8.0 or newer. Media Proxy is a fallback
for missing uploads; it does not replace a controlled full media transfer
before stage or production cutover.