aboutsummaryrefslogtreecommitdiff
path: root/apps/web/app/api/upload_image/route.ts
blob: 7ba7557684fee2fc7110617e2fee77a0d7476011 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
import { S3Client, PutObjectCommand } from "@aws-sdk/client-s3";
import { getSignedUrl } from "@aws-sdk/s3-request-presigner";

import type { NextRequest } from "next/server";
import { ensureAuth } from "../ensureAuth";

export const runtime = "edge";

export async function PUT(request: NextRequest) {
	const d = await ensureAuth(request);

	if (!d) {
		return new Response("Unauthorized", { status: 401 });
	}

	const reqUrl = new URL(request.url);
	const filename = reqUrl.searchParams.get("filename");

	if (!filename) {
		return new Response("Missing filename", { status: 400 });
	}

	if (
		!process.env.R2_ENDPOINT ||
		!process.env.R2_ACCESS_ID ||
		!process.env.R2_SECRET_KEY ||
		!process.env.R2_BUCKET_NAME
	) {
		return new Response(
			"Missing one or more R2 env variables: R2_ENDPOINT, R2_ACCESS_ID, R2_SECRET_KEY, R2_BUCKET_NAME. To get them, go to the R2 console, create and paste keys in a `.dev.vars` file in the root of this project.",
			{ status: 500 },
		);
	}

	const s3 = new S3Client({
		region: "auto",
		endpoint: process.env.R2_ENDPOINT,
		credentials: {
			accessKeyId: process.env.R2_ACCESS_ID,
			secretAccessKey: process.env.R2_SECRET_KEY,
		},
	});

	const url = await getSignedUrl(
		s3,
		new PutObjectCommand({ Bucket: process.env.R2_BUCKET_NAME, Key: filename }),
		{ expiresIn: 3600 },
	);

	return new Response(JSON.stringify({ url }), {
		status: 200,
		headers: {
			"Content-Type": "application/json",
		},
	});
}