arkvault/src/routes/api/file/upload/+server.ts

import { error, text } from "@sveltejs/kit";
import { authorize } from "$lib/server/modules/auth";
import { fileUploadRequest } from "$lib/server/schemas";
import { uploadFile } from "$lib/server/services/file";
import type { RequestHandler } from "./$types";

export const POST: RequestHandler = async ({ request, cookies }) => {
  const { userId } = await authorize(cookies, "activeClient");

  const form = await request.formData();
  const metadata = form.get("metadata");
  const content = form.get("content");
  if (typeof metadata !== "string" || !(content instanceof File)) {
    error(400, "Invalid request body");
  }

  const zodRes = fileUploadRequest.safeParse(JSON.parse(metadata));
  if (!zodRes.success) error(400, "Invalid request body");
  const { parentId, mekVersion, dek, contentIv, name, nameIv } = zodRes.data;

  await uploadFile(
    {
      userId,
      parentId,
      mekVersion,
      encDek: dek,
      encContentIv: contentIv,
      encName: name,
      encNameIv: nameIv,
    },
    content.stream(),
  );
  return text("File uploaded", { headers: { "Content-Type": "text/plain" } });
};