# File Uploads with Apollo Server 2.0

DevFeed: [File Uploads with Apollo Server 2.0](<https://devfeed.tech/articles/file-uploads-with-apollo-server-2-0-23603.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/with-apollo-server-2-0>)

Author: Prosper Otemuyiwa

Published: 2018-07-03T17:47:00Z

Content type: tutorial

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [GraphQL](<https://devfeed.tech/topics/graphql.md>), [apollo-server](<https://devfeed.tech/topics/apollo-server.md>), [API](<https://devfeed.tech/topics/api.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [apollo-client](<https://devfeed.tech/tags/apollo-client.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [uploads](<https://devfeed.tech/tags/uploads.md>)

## AI overview

This article explains how Apollo Server 2.0 supports file uploads through the GraphQL multipart form requests specification. It describes client-side file mapping, multipart requests, server processing, and resolver upload arguments. A May 2022 update recommends against the described multipart approach and notes that the feature was removed from Apollo Server 3 because of security concerns including CSRF attacks.

## Source excerpt

Update: May 2022 For our recommendation on how to handle file uploads, read Apollo Server File Uploads Best Practices. Our current recommendation is to not use the multipart request approach described in this package. In fact, this feature was removed from Apollo Server in version 3, although you can still manually integrate with the package if you take care to protect yourself from Cross-Site Request Forgery (CSRF) attacks.