Media / foldkit-media/server

UploadPolicy

class · packages/media/src/server/upload.ts:42

class UploadPolicy extends Context.Service<
  UploadPolicy,
  {
    readonly admit: (
      request: HttpServerRequest.HttpServerRequest,
    ) => Effect.Effect<void, UploadForbidden>
  }
>()('foldkit-media/UploadPolicy') {}

Who may upload, asked of every request before its body is read. The route has no default: an application that serves uploads says who may (a foldkit-guard policy over the session, an API key), so a server is never open to every upload by omission.

In the guides