feat: s3 avatar uploads

apps/web/src/pages/api/upload/image.ts

@@ -0,0 +1,52 @@
+import type { NextRequest } from "next/server";
+import { S3Client } from "@aws-sdk/client-s3";
+import { createPresignedPost } from "@aws-sdk/s3-presigned-post";
+
+import { env } from "~/env";
+
+export default async function POST(req: NextRequest) {
+  if (req.method !== "POST") {
+    return new Response(JSON.stringify({ error: "Method not allowed" }), {
+      status: 405,
+      headers: { "Content-Type": "application/json" },
+    });
+  }
+
+  try {
+    const { filename, contentType } = await req.json();
+
+    const client = new S3Client({
+      forcePathStyle: true,
+      region: env.S3_REGION,
+      endpoint: env.S3_ENDPOINT,
+      credentials: {
+        accessKeyId: env.S3_ACCESS_KEY_ID,
+        secretAccessKey: env.S3_SECRET_ACCESS_KEY,
+      },
+    });
+    const signedUrl = await createPresignedPost(client, {
+      Bucket: env.NEXT_PUBLIC_AVATAR_BUCKET_NAME ?? "",
+      Key: filename,
+
+      Conditions: [
+        ["content-length-range", 0, 10485760], // up to 10 MB
+        ["starts-with", "$Content-Type", contentType],
+      ],
+      Fields: {
+        acl: "public-read",
+        "Content-Type": contentType,
+      },
+      Expires: 600,
+    });
+
+    const { url, fields } = signedUrl;
+
+    return Response.json({ url, fields });
+  } catch (error) {
+    return Response.json({ error: (error as Error).message });
+  }
+}
+
+export const runtime = "edge";
+export const preferredRegion = "lhr1";
+export const dynamic = "force-dynamic";