upload

What problem does it solve?

Centralizes and hardens file upload and media processing so teams can accept images, video, audio, and documents without introducing security, performance, or privacy regressions. It removes fragile patterns like proxying uploads through the app, trusting client-provided MIME types, and serving unscanned content.

Core Features & Use Cases

• Presigned & Resumable Flows: Generate presigned PUT URLs, multipart uploads, and tus resumable endpoints to handle small images, large videos, and intermittent mobile networks.
• Security & Validation: Server-side type allowlists, magic-bytes verification, ClamAV scanning, EXIF stripping, quota checks, and quarantine policies to prevent malicious or private data leaks.
• Optimization & Delivery: Image variants (WebP/AVIF), LQIP placeholders, FFmpeg transcoding and HLS packaging for video, CDN signing for private assets, and lifecycle cleanup for orphaned uploads.
• Use Case: Accept user profile photos and long-form video uploads concurrently, validate and scan every file, produce optimized variants, and serve through a CDN with short-lived signed URLs.

Quick Start

Request a presigned PUT URL for the file, upload directly to object storage, and allow the backend worker to validate, virus-scan, strip EXIF, and generate optimized variants before making the URL available.