Customer file uploads for SaaS products

import { Dreep } from "dreep";

const dreep = new Dreep({
  apiKey: process.env.DREEP_API_KEY,
  signingSecret: process.env.DREEP_SIGNING_SECRET,
});

const MAX_BYTES = { attachments: 25_000_000, documents: 50_000_000 };

// POST /api/uploads/presign (your auth middleware sets req.user)
export const postUploadPresign = async (req, res) => {
  const { kind, filename, contentType, sizeBytes } = req.body;
  const { tenantId } = req.user; // never trust a tenantId sent by the client

  if (!MAX_BYTES[kind] || sizeBytes > MAX_BYTES[kind]) {
    return res.status(400).json({ error: "Upload not allowed" });
  }

  const upload = await dreep.presignUpload({
    filename,
    contentType,
    sizeBytes,
    folder: "tenants/" + tenantId + "/" + kind,
  });

  return res.json({ id: upload.id, uploadUrl: upload.uploadUrl });
};

// After loading the file row and checking file.tenantId === req.user.tenantId
export const fileLink = ({ asset }) => dreep.signedUrl(asset, { expiresIn: 300 });

// OCR a stored receipt or PDF in a Signed folder, no re-upload
export const receiptText = async ({ asset }) => {
  const res = await fetch(dreep.signedUrl(asset, { expiresIn: 60, transform: { format: "txt" } }));
  return res.text();
};

var allowedKinds = map[string]bool{"attachments": true, "documents": true}

// POST /api/uploads/presign. tenantFromSession is your own auth helper.
func presignHandler(client *dreep.Client) http.HandlerFunc {
	return func(w http.ResponseWriter, r *http.Request) {
		tenantID := tenantFromSession(r)

		var body struct {
			Kind        string `json:"kind"`
			Filename    string `json:"filename"`
			ContentType string `json:"contentType"`
			SizeBytes   int64  `json:"sizeBytes"`
		}
		if err := json.NewDecoder(r.Body).Decode(&body); err != nil || !allowedKinds[body.Kind] {
			http.Error(w, "upload not allowed", http.StatusBadRequest)
			return
		}

		upload, err := client.PresignUpload(r.Context(), dreep.PresignOptions{
			Filename:    body.Filename,
			ContentType: body.ContentType,
			SizeBytes:   body.SizeBytes,
			Destination: dreep.Destination{Folder: "tenants/" + tenantID + "/" + body.Kind},
		})
		if err != nil {
			http.Error(w, "presign failed", http.StatusBadGateway)
			return
		}
		json.NewEncoder(w).Encode(upload)
	}
}

// After confirm: OCR a receipt in a Signed folder.
text, err := client.ExtractText(ctx, assetID, &dreep.TextOptions{SigningTTL: time.Minute})

# Once: Signed root for tenant files
curl -X POST https://api.dreep.cloud/api/v1/folders \
  -H "Authorization: Bearer $DREEP_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"path":"tenants","accessControlType":"signed","defaultExpirySeconds":300}'

# Presign an invoice upload for tenant t_42
curl -X POST https://api.dreep.cloud/api/v1/upload/presign \
  -H "Authorization: Bearer $DREEP_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"filename":"invoice-0193.pdf","contentType":"application/pdf",
       "sizeBytes":412337,"folder":"tenants/t_42/documents"}'

# Remove the background from a product shot
curl -X POST https://api.dreep.cloud/api/v1/bg-remove \
  -H "Authorization: Bearer $DREEP_API_KEY" \
  -F "file=@chair.jpg" -F "folder=catalog/t_42"