Handle file uploads safely

Build an upload endpoint that you can actually put in production: validation, storage, quotas and signed URLs — step by step.

Lessons

• Accept a multipart upload
• Validate size and MIME type
• Store the file and its metadata
• Enforce a per-user quota
• Serve downloads with signed URLs
• Clean up orphaned files