The latest updates to Canva's app development platform.


  • Apps that support authentication can now let users disconnect (de-authenticate) from the app. To learn more, refer to Authentication.




  • When a user publishes a design via a publish extension, the upload request now includes a designId property. This property contains the ID of the user's design. This ID is obfuscated and does not change between uploads, which allows extensions to detect when a user is re-publishing a design.


  • Improved the Client secret field in the Developer Portal. Previously, the key was provided as a base64url-encoded string and your app needed to convert it into a base64-encoded string. The key is now provided as a base64-encoded string.


  • Editing extensions can now process images on a server, instead of via a browser. This makes it possible to perform CPU or GPU-intensive image manipulation tasks (e.g. tasks that rely on machine learning). To learn more, refer to Remote image processing.