@rmdes/indiekit-endpoint-activitypub 3.11.1 → 3.11.3

package/lib/mastodon/router.js

@@ -67,7 +67,8 @@ export function createMastodonRouter({ collections, pluginOptions = {} }) {
 
   // ─── Body parsers ───────────────────────────────────────────────────────
   // Mastodon clients send JSON, form-urlencoded, and occasionally text/plain.
-  // These must be applied before route handlers.
+  // Note: multipart/form-data is handled globally by express-fileupload
+  // (configured in Indiekit's express.js), so no multer needed here.
   router.use("/api", express.json());
   router.use("/api", express.urlencoded({ extended: true }));
   router.use("/oauth", express.json());

package/lib/mastodon/routes/media.js

@@ -5,18 +5,16 @@
  * POST /api/v1/media — legacy upload (same as v2)
  * GET /api/v1/media/:id — get media attachment metadata
  * PUT /api/v1/media/:id — update media metadata (description/focus)
+ *
+ * File uploads are handled by express-fileupload (configured globally by
+ * Indiekit's express.js). Files arrive on req.files, NOT req.file (multer).
  */
 import express from "express";
-import multer from "multer";
 import { ObjectId } from "mongodb";
 import { tokenRequired } from "../middleware/token-required.js";
 import { scopeRequired } from "../middleware/scope-required.js";
 
 const router = express.Router(); // eslint-disable-line new-cap
-const upload = multer({
-  storage: multer.memoryStorage(),
-  limits: { fileSize: 40 * 1024 * 1024 },
-});
 
 /**
  * Determine Mastodon media type from MIME type.
@@ -54,6 +52,7 @@ function serializeMediaAttachment(doc) {
 
 /**
  * Upload file to the Micropub media endpoint.
+ * Accepts an express-fileupload file object (has .data Buffer, .mimetype, .name).
  * Returns the URL from the Location header.
  */
 async function uploadToMediaEndpoint(file, application, token) {
@@ -67,8 +66,8 @@ async function uploadToMediaEndpoint(file, application, token) {
     : new URL(mediaEndpoint, application.url).href;
 
   const formData = new FormData();
-  const blob = new Blob([file.buffer], { type: file.mimetype });
-  formData.append("file", blob, file.originalname);
+  const blob = new Blob([file.data], { type: file.mimetype });
+  formData.append("file", blob, file.name);
 
   const response = await fetch(mediaUrl, {
     method: "POST",
@@ -95,7 +94,6 @@ router.post(
   "/api/v2/media",
   tokenRequired,
   scopeRequired("write", "write:media"),
-  upload.single("file"),
   async (req, res, next) => {
     try {
       const { application } = req.app.locals;
@@ -103,7 +101,8 @@ router.post(
       const token =
         req.session?.access_token || req.mastodonToken?.accessToken;
 
-      if (!req.file) {
+      const file = req.files?.file;
+      if (!file) {
         return res.status(422).json({ error: "No file provided" });
       }
 
@@ -113,17 +112,13 @@ router.post(
           .json({ error: "Authentication required for media upload" });
       }
 
-      const fileUrl = await uploadToMediaEndpoint(
-        req.file,
-        application,
-        token,
-      );
+      const fileUrl = await uploadToMediaEndpoint(file, application, token);
 
       const doc = {
         url: fileUrl,
         description: req.body.description || "",
         focus: req.body.focus || null,
-        mimeType: req.file.mimetype,
+        mimeType: file.mimetype,
         createdAt: new Date(),
       };
 
@@ -143,7 +138,6 @@ router.post(
   "/api/v1/media",
   tokenRequired,
   scopeRequired("write", "write:media"),
-  upload.single("file"),
   async (req, res, next) => {
     try {
       const { application } = req.app.locals;
@@ -151,7 +145,8 @@ router.post(
       const token =
         req.session?.access_token || req.mastodonToken?.accessToken;
 
-      if (!req.file) {
+      const file = req.files?.file;
+      if (!file) {
         return res.status(422).json({ error: "No file provided" });
       }
 
@@ -161,17 +156,13 @@ router.post(
           .json({ error: "Authentication required for media upload" });
       }
 
-      const fileUrl = await uploadToMediaEndpoint(
-        req.file,
-        application,
-        token,
-      );
+      const fileUrl = await uploadToMediaEndpoint(file, application, token);
 
       const doc = {
         url: fileUrl,
         description: req.body.description || "",
         focus: req.body.focus || null,
-        mimeType: req.file.mimetype,
+        mimeType: file.mimetype,
         createdAt: new Date(),
       };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rmdes/indiekit-endpoint-activitypub",
-  "version": "3.11.1",
+  "version": "3.11.3",
   "description": "ActivityPub federation endpoint for Indiekit via Fedify. Adds full fediverse support: actor, inbox, outbox, followers, following, syndication, and Mastodon migration.",
   "keywords": [
     "indiekit",
@@ -45,7 +45,6 @@
     "express": "^5.0.0",
     "express-rate-limit": "^7.5.1",
     "ioredis": "^5.9.3",
-    "multer": "^2.1.1",
     "sanitize-html": "^2.13.1",
     "unfurl.js": "^6.4.0"
   },