Merge pull request #6 from Inkubator-IT/feat/obj-storage

Add obj storage APIs

Author: satriadhikara

.env.example

@@ -10,4 +10,11 @@
 
 APP_PORT=9000
 NODE_ENV=development
-DATABASE_URL=postgresql://myuser:mypassword@localhost:5433/mydb
+DATABASE_URL=postgresql://myuser:mypassword@localhost:5433/mydb
+
+# S3 Storage Configuration
+S3_ACCESS_KEY_ID=your_access_key_id
+S3_SECRET_ACCESS_KEY=your_secret_access_key
+S3_BUCKET=your_bucket_name
+S3_ENDPOINT=https://s3.amazonaws.com
+S3_REGION=us-east-1

bun.lock

@@ -8,6 +8,7 @@
         "drizzle-orm": "^0.44.7",
         "hono": "^4.9.6",
         "postgres": "^3.4.4",
+        "slugify": "^1.6.6",
         "zod": "^3.23.8",
       },
       "devDependencies": {
@@ -126,6 +127,8 @@
 
     "resolve-pkg-maps": ["resolve-pkg-maps@1.0.0", "", {}, "sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw=="],
 
+    "slugify": ["slugify@1.6.6", "", {}, "sha512-h+z7HKHYXj6wJU+AnS/+IH8Uh9fdcX1Lrhg1/VMdf9PwoBQXFcXiAdsy2tSK0P6gKwJLXp02r90ahUCqHk9rrw=="],
+
     "source-map": ["source-map@0.6.1", "", {}, "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g=="],
 
     "source-map-support": ["source-map-support@0.5.21", "", { "dependencies": { "buffer-from": "^1.0.0", "source-map": "^0.6.0" } }, "sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w=="],

package.json

@@ -16,6 +16,7 @@
 		"drizzle-orm": "^0.44.7",
 		"hono": "^4.9.6",
 		"postgres": "^3.4.4",
+		"slugify": "^1.6.6",
 		"zod": "^3.23.8"
 	},
 	"devDependencies": {

src/configs/env.ts

@@ -0,0 +1,14 @@
+import { z } from "zod";
+
+const envSchema = z.object({
+	APP_PORT: z.string().default("9000"),
+	NODE_ENV: z.string().default("development"),
+	DATABASE_URL: z.string(),
+	S3_ACCESS_KEY_ID: z.string(),
+	S3_SECRET_ACCESS_KEY: z.string(),
+	S3_BUCKET: z.string(),
+	S3_ENDPOINT: z.string(),
+	S3_REGION: z.string(),
+});
+
+export const env = envSchema.parse(Bun.env);

src/configs/index.ts

@@ -0,0 +1,2 @@
+export { env } from "./env";
+export { default as s3 } from "./s3";

src/configs/s3.ts

@@ -0,0 +1,12 @@
+import { S3Client } from "bun";
+import { env } from "./env";
+
+const s3 = new S3Client({
+	accessKeyId: env.S3_ACCESS_KEY_ID,
+	secretAccessKey: env.S3_SECRET_ACCESS_KEY,
+	bucket: env.S3_BUCKET,
+	endpoint: env.S3_ENDPOINT,
+	region: env.S3_REGION,
+});
+
+export default s3;

src/index.ts

@@ -9,6 +9,7 @@ import {
 	projectsRoutes,
 	blogsRoutes,
 	clientInformationRoutes,
+	storageRoutes,
 } from "./routes";
 
 const app = new Hono();
@@ -54,6 +55,7 @@ app.route("/api/services", servicesRoutes);
 app.route("/api/projects", projectsRoutes);
 app.route("/api/blogs", blogsRoutes);
 app.route("/api/client-information", clientInformationRoutes);
+app.route("/api/storage", storageRoutes);
 
 // Initialize database on startup
 async function initializeDatabase() {

src/routes/index.ts

@@ -4,3 +4,4 @@ export { servicesRoutes } from "./services.routes";
 export { projectsRoutes } from "./projects.routes";
 export { blogsRoutes } from "./blogs.routes";
 export { clientInformationRoutes } from "./client-information.routes";
+export { storageRoutes } from "./storage.routes";

src/routes/storage.routes.ts

@@ -0,0 +1,69 @@
+import { Hono } from "hono";
+import { s3 } from "../configs";
+import {
+	storagePresignBodyValidator,
+	storageReadBodyValidator,
+} from "../validators/storage.validator";
+import slugify from "slugify";
+
+const ALLOWED_TYPES = [
+	"image/jpeg",
+	"image/png",
+	"image/webp",
+	"image/heic",
+	"image/heif",
+];
+
+export const storageRoutes = new Hono();
+
+// POST /api/storage - Get presigned URL for upload
+storageRoutes.post("/", storagePresignBodyValidator, async (c) => {
+	const { fileName } = await c.req.json();
+
+	const ext = fileName.substring(fileName.lastIndexOf("."));
+	const nameWithoutExt = fileName.substring(0, fileName.lastIndexOf("."));
+
+	const extToType: Record<string, string> = {
+		".jpg": "image/jpeg",
+		".jpeg": "image/jpeg",
+		".png": "image/png",
+		".webp": "image/webp",
+		".heic": "image/heic",
+		".heif": "image/heif",
+	};
+
+	const contentType = extToType[ext] ?? "";
+
+	if (!ALLOWED_TYPES.includes(contentType)) {
+		return c.json({ error: "Invalid file type" }, 400);
+	}
+
+	const sanitizedFileName = slugify(nameWithoutExt, {
+		lower: true,
+		strict: true,
+		trim: true,
+	}).substring(0, 100);
+
+	const uuid = crypto.randomUUID();
+	const key = `uploads/${sanitizedFileName}-${uuid}${ext}`;
+
+	const uploadUrl = s3.presign(key, {
+		expiresIn: 60 * 15, // 15 minutes
+		method: "PUT",
+		type: contentType,
+	});
+
+	return c.json({ url: uploadUrl, key, contentType });
+});
+
+// GET /api/storage - Get presigned URL for reading
+storageRoutes.get("/", storageReadBodyValidator, async (c) => {
+	const { key } = c.req.query();
+
+	const readUrl = s3.presign(key, {
+		method: "GET",
+		expiresIn: 60 * 60, // 1 hour
+	});
+
+	return c.json({ url: readUrl });
+});

src/validators/storage.validator.ts

@@ -0,0 +1,30 @@
+import { z } from "zod";
+import type { Context, Next } from "hono";
+
+const storagePresignBodySchema = z.object({
+	fileName: z.string().min(1, "File name is required"),
+});
+
+const storageReadBodySchema = z.object({
+	key: z.string().min(1, "Key is required"),
+});
+
+export const storagePresignBodyValidator = async (c: Context, next: Next) => {
+	try {
+		const body = await c.req.json();
+		storagePresignBodySchema.parse(body);
+		await next();
+	} catch (error) {
+		return c.json({ error: "Invalid request body" }, 400);
+	}
+};
+
+export const storageReadBodyValidator = async (c: Context, next: Next) => {
+	try {
+		const query = c.req.query();
+		storageReadBodySchema.parse(query);
+		await next();
+	} catch (error) {
+		return c.json({ error: "Invalid query parameters" }, 400);
+	}
+};