Initial commit: teaching institution management API.

Express/MongoDB backend with JWT auth, RBAC, S3 uploads, notifications, and scheduled jobs.

components/files/fileController.js

@@ -0,0 +1,36 @@
+// /components/files/fileController.js
+
+const catchAsync = require('../../utils/catchAsync');
+const fileService = require('./fileService');
+const { successResponse } = require('../../utils/apiResponse');
+const AppError = require('../../utils/AppError');
+
+exports.uploadTemp = catchAsync(async (req, res, next) => {
+  if (!req.file) {
+    return next(new AppError('FILE_REQUIRED'));
+  }
+
+  const result = await fileService.uploadTempFile(
+    req.file.buffer,
+    req.file.originalname,
+    req.file.mimetype
+  );
+
+  return successResponse(res, 201, 'File uploaded to temp bucket successfully', result);
+});
+
+exports.getSignedUrl = catchAsync(async (req, res, next) => {
+  const { filename } = req.params;
+  const { bucket } = req.query;
+
+  const result = await fileService.getPresignedUrl(filename, bucket);
+  return successResponse(res, 200, 'Temporary presigned URL generated successfully', result);
+});
+
+exports.deleteFile = catchAsync(async (req, res, next) => {
+  const { filename } = req.params;
+  const { bucket } = req.query;
+
+  await fileService.deleteFile(filename, bucket);
+  return successResponse(res, 200, 'File deleted successfully');
+});

components/files/fileRoutes.js

@@ -0,0 +1,30 @@
+// /components/files/fileRoutes.js
+
+const express = require('express');
+const multer = require('multer');
+const fileController = require('./fileController');
+const { validateGetSignedUrl } = require('./fileValidator');
+const authMiddleware = require('../../middlewares/authMiddleware');
+const perm = require('../../middlewares/permissionMiddleware');
+const { PERMISSIONS } = require('../../constants/permissions');
+
+const router = express.Router();
+
+// Memory Storage for Multer to stream directly to S3 temp bucket
+const upload = multer({
+  storage: multer.memoryStorage(),
+  limits: { fileSize: 25 * 1024 * 1024 } // 25MB limit
+});
+
+router.use(authMiddleware);
+
+// User Scope
+router.post('/user/upload-temp', perm.requires(PERMISSIONS.FILES_UPLOAD), upload.single('file'), fileController.uploadTemp);
+router.get('/user/signed-url/:filename', perm.requires(PERMISSIONS.FILES_READ), validateGetSignedUrl, fileController.getSignedUrl);
+
+// Admin Scope
+router.post('/admin/upload-temp', perm.requires(PERMISSIONS.FILES_UPLOAD), upload.single('file'), fileController.uploadTemp);
+router.get('/admin/signed-url/:filename', perm.requires(PERMISSIONS.FILES_READ), validateGetSignedUrl, fileController.getSignedUrl);
+router.delete('/admin/delete/:filename', perm.requires(PERMISSIONS.FILES_DELETE), fileController.deleteFile);
+
+module.exports = router;

components/files/fileService.js

@@ -0,0 +1,55 @@
+// /components/files/fileService.js
+
+const path = require('path');
+const {
+  uploadToTempBucket,
+  commitTempFile,
+  generatePresignedUrl,
+  deleteFromBucket
+} = require('../../utils/s3Client');
+const AppError = require('../../utils/AppError');
+
+const uploadTempFile = async (fileBuffer, originalName, mimeType) => {
+  if (!fileBuffer || !originalName) {
+    throw new AppError('FILE_REQUIRED');
+  }
+
+  const ext = path.extname(originalName);
+  const uniquePrefix = `${Date.now()}-${Math.round(Math.random() * 1E9)}`;
+  const tempFileName = `temp-${uniquePrefix}${ext}`;
+
+  const result = await uploadToTempBucket(fileBuffer, tempFileName, mimeType);
+  return {
+    tempFileName: result.tempFileName,
+    originalName,
+    mimeType
+  };
+};
+
+const getPresignedUrl = async (filename, bucket = null) => {
+  if (!filename) {
+    throw new AppError('VALIDATION_FAILED', null, 'Filename is required');
+  }
+
+  const signedUrl = await generatePresignedUrl(filename, bucket || undefined);
+  return {
+    filename,
+    presignedUrl: signedUrl,
+    expiresInSeconds: 900
+  };
+};
+
+const commitFile = async (tempFileName, targetFileName = null) => {
+  return commitTempFile(tempFileName, targetFileName);
+};
+
+const deleteFile = async (filename, bucket = null) => {
+  return deleteFromBucket(filename, bucket);
+};
+
+module.exports = {
+  uploadTempFile,
+  getPresignedUrl,
+  commitFile,
+  deleteFile
+};

components/files/fileValidator.js

@@ -0,0 +1,6 @@
+// Stub validator — pass-through middleware (no validation yet)
+const passThrough = (req, res, next) => next();
+
+module.exports = new Proxy({}, {
+  get: () => passThrough
+});