- Use `GET` request method by default.

Added

- RESTer will now download response bodies as files, if the response has a `Content-Disposition: attachment` header. Thanks @zenglanmu.

Added

- Add "Send Request In New Tab" menu entry, which opens the current request URL in a new tab.

Fixed

- Always encode URL query params (name and value) when "Toogle URL params" is on. This fixes an issue where entering # in a query param would truncate the remaining URL.
- Fixes OAuth 2 issues with invalid Origin header in certain cases.

Added

- Support `NaN` in JSON for pretty printing/beautifying

Fixed

- Only url-encode variables in request body.

Fixed

- Encode variables in form encoded request body.

The webRequest and webRequestBlocking permissions are not optional. RESTer requests them automatically the first time a request is sent. Neither Firefox, nor Chrome currently show a permission prompt for that. Making those permissions optional allows RESTer to work in environments where those permissins are blocked (e.g. by Chrome Enterprise Policy).

Added

- Troubleshooting advice for network errors
- Heading and "no items" text to environment selection dialog
- Tooltip for URL parameters toggle button

Changed

- Use normal button to add new environment because the floating action button is hard to see

Fixed

- RESTer doesn't switch to plain body input if request content type is `text/plain`

JSON pretty printing/beautifying no longer modifies certain values in the JSON, e.g. big numbers.

Before JSON was pretty printed using `JSON.stringify(JSON.parse(str), null, 4)`. This is easy and fast. But it normalizes values, e.g. a value like `0.0` changes to `0`. Since numbers are represented as `Number` after being parsed, very big numbers loose precision, e.g. `55871516310040211` turns into `55871516310040210`.

The new formatting is a bit slower but does not modify any except whitespace.

I think this is worth the performance cost. RESTer should not modify the response just because it pretty prints it. This could be very confusing.

Fixed bug where Chrome would not send custom headers if an authorization was selected

Don't remove manually entered Cookie header when selecting an Authorization in the Authorization tab

PKCE support for OAuth 2 authorization code flow

User name is now allowd to be empty in the basic auth dialog.

Fixed shell escaping for curl command generation. Query parameters and single quotes should now be escaped properly.

Fixed

- Always render response body preview on white background. This improves color contrasts, especially with the Dark theme.
- Update dependencies.

- Update dependencies

Added

- Some OAuth 2 servers don't supports URL-encoded credentials in HTTP Basic authentication headers ([#139])(https://github.com/frigus02/RESTer/issues/139)). RESTer now allows to turn URL-encoding off by choosing the "HTTP Basic authentication (no encode)" authentication option.
- Added dialog in "Organize" page, which allows you to quickly delete multiple requests.

Added

- Allow entering a custom title for basic authentication tokens.
- Add OAuth 2 config title to generated tokens.

Changed

- Variable names can now only contain alphanumeric characters as well as `$._-`. This fixes an annoying behaviour when JSON objects were incorrectly identified as variables.
- Increase width of environment variable dialog.
- When an authentication token has been generated using the _Custom_ option and it's base64 encoded, show "Base64" in the token title.

Fixed Postman export when there was a request with the same title as the collection of another request.

Added checkbox option for automatically encode token value to base64 string for custom authorization header dialog.

Changed

- RESTer now requires Firefox 63 or Chrome 67.
- No longer append "Copy" to a request title when using the "Duplicate request" function. It turned out to be more annoying than helpful.

Fixed

- Fixed library list on about page.
- Improve memory usage of large response bodies.

Fixed

- Fixed UI bug in clean up dialog when history is empty.
- Long auth tokens no longer break the page layout.

Added

- Added option to show curl command for current request.

Changed

- Changed way of how to duplicate requests. The save button now just saves the current request. You can duplicate a request by clicking on the corresponding menu item in the "More options" menu (the icon with 3 dots in top right corner).

Fixed

- Auth tokens were not visible after reloading the page.