Contents

# frozen_string_literal: true

# Creates a new blob on the server side in anticipation of a direct-to-service upload from the client side.
# When the client-side upload is completed, the signed_blob_id can be submitted as part of the form to reference
# the blob that was created up front.
class ActiveStorage::DirectUploadsController < ActiveStorage::BaseController
  include ActiveStorage::DirectUploadToken

  def create
    blob = ActiveStorage::Blob.create_before_direct_upload!(**blob_args.merge(service_name: verified_service_name))
    render json: direct_upload_json(blob)
  end

  private
    def blob_args
      params.require(:blob).permit(:filename, :byte_size, :checksum, :content_type, metadata: {}).to_h.symbolize_keys
    end

    def verified_service_name
      ActiveStorage::DirectUploadToken.verify_direct_upload_token(params[:direct_upload_token], params[:attachment_name], session)
    end

    def direct_upload_json(blob)
      blob.as_json(root: false, methods: :signed_id).merge(direct_upload: {
        url: blob.service_url_for_direct_upload,
        headers: blob.service_headers_for_direct_upload
      })
    end
end

Version data entries

5 entries across 5 versions & 1 rubygems

Version	Path
activestorage-7.0.1	app/controllers/active_storage/direct_uploads_controller.rb
activestorage-7.0.0	app/controllers/active_storage/direct_uploads_controller.rb
activestorage-7.0.0.rc3	app/controllers/active_storage/direct_uploads_controller.rb
activestorage-7.0.0.rc2	app/controllers/active_storage/direct_uploads_controller.rb
activestorage-7.0.0.rc1	app/controllers/active_storage/direct_uploads_controller.rb