kavehhn
f04c797be6
Express/MongoDB backend with JWT auth, RBAC, S3 uploads, notifications, and scheduled jobs.
31 lines
1.3 KiB
JavaScript
31 lines
1.3 KiB
JavaScript
// /components/files/fileRoutes.js
|
|
|
|
const express = require('express');
|
|
const multer = require('multer');
|
|
const fileController = require('./fileController');
|
|
const { validateGetSignedUrl } = require('./fileValidator');
|
|
const authMiddleware = require('../../middlewares/authMiddleware');
|
|
const perm = require('../../middlewares/permissionMiddleware');
|
|
const { PERMISSIONS } = require('../../constants/permissions');
|
|
|
|
const router = express.Router();
|
|
|
|
// Memory Storage for Multer to stream directly to S3 temp bucket
|
|
const upload = multer({
|
|
storage: multer.memoryStorage(),
|
|
limits: { fileSize: 25 * 1024 * 1024 } // 25MB limit
|
|
});
|
|
|
|
router.use(authMiddleware);
|
|
|
|
// User Scope
|
|
router.post('/user/upload-temp', perm.requires(PERMISSIONS.FILES_UPLOAD), upload.single('file'), fileController.uploadTemp);
|
|
router.get('/user/signed-url/:filename', perm.requires(PERMISSIONS.FILES_READ), validateGetSignedUrl, fileController.getSignedUrl);
|
|
|
|
// Admin Scope
|
|
router.post('/admin/upload-temp', perm.requires(PERMISSIONS.FILES_UPLOAD), upload.single('file'), fileController.uploadTemp);
|
|
router.get('/admin/signed-url/:filename', perm.requires(PERMISSIONS.FILES_READ), validateGetSignedUrl, fileController.getSignedUrl);
|
|
router.delete('/admin/delete/:filename', perm.requires(PERMISSIONS.FILES_DELETE), fileController.deleteFile);
|
|
|
|
module.exports = router;
|