File uploads for your app, without the bill

// app/api/upload/route.ts: runs on your server, so the secret key stays private
import { auth } from '@/lib/auth'; // your own session check

export async function POST(req: Request) {
  const user = await auth(req);
  if (!user) return Response.json({ error: 'unauthorized' }, { status: 401 });

  const { name, size, type } = await req.json();
  const res = await fetch('https://api.rapidfile.cc/v1/uploads', {
    method: 'POST',
    headers: {
      Authorization: `Bearer ${process.env.RAPIDFILE_SECRET_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({ name, size, type, metadata: { userId: user.id } }),
  });
  return Response.json(await res.json(), { status: res.status });
}

// server.js: Express creates the upload, the browser sends the bytes
import express from 'express';

const app = express();
app.use(express.json());

app.post('/api/upload', requireUser, async (req, res) => {
  const { name, size, type } = req.body;
  const r = await fetch('https://api.rapidfile.cc/v1/uploads', {
    method: 'POST',
    headers: {
      Authorization: `Bearer ${process.env.RAPIDFILE_SECRET_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({ name, size, type, metadata: { userId: req.user.id } }),
  });
  res.status(r.status).json(await r.json());
});

app.listen(3000);

// In the browser: no SDK, no API key
const picked = document.querySelector('input[type=file]').files[0];

// 1. Ask your own server for an upload URL
const { upload } = await fetch('/api/upload', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({ name: picked.name, size: picked.size, type: picked.type }),
}).then((r) => r.json());

// 2. Send the bytes straight to Rapidfile (files up to 95 MB use one PUT)
const res = await fetch(upload.url, { method: 'PUT', body: picked });
const { file } = await res.json();
console.log(file.url); // https://cdn.rapidfile.cc/<id>/<name>

# 1. Create an upload (server side, with your secret key)
curl https://api.rapidfile.cc/v1/uploads \
  -H "Authorization: Bearer $RAPIDFILE_SECRET_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name":"cat.jpg","size":48213,"type":"image/jpeg"}'

# 2. PUT the bytes to upload.url from the response (no key needed)
curl -T cat.jpg "$UPLOAD_URL"

# Or upload from your server in one request (up to 95 MB)
curl -T cat.jpg -H "Content-Type: image/jpeg" \
  -H "Authorization: Bearer $RAPIDFILE_SECRET_KEY" \
  "https://api.rapidfile.cc/v1/files?name=cat.jpg"