mbkbucket 1.5.0 → 1.5.1

package/index.js

@@ -37,8 +37,10 @@ const generalLimiter = rateLimit({
   }
 });
 
-server.use(express.json());
-server.use(express.urlencoded({ extended: true }));
+// Increase body size limits to support larger form submissions (e.g., multipart upload init/complete payloads).
+// Multipart/form-data uploads themselves are handled separately via multer in the upload endpoints.
+server.use(express.json({ limit: '10mb' }));
+server.use(express.urlencoded({ extended: true, limit: '10mb' }));
 
 // Serve only specific static assets (limit exposure): CSS and JS used by the dashboard
 // This replaces serving the entire /public directory.

package/lib/routes/api.js

@@ -4,7 +4,32 @@ import { listfiles, uploadFile, deleteFile, deleteFiles, deleteFolder, downloadF
 import multer from "multer";
 
 const router = express.Router();
-const upload = multer({ storage: multer.memoryStorage() });
+
+// This is the maximum size we allow per chunk upload. It should be >=
+// the client chunk size (5MB) and leave room for any encoding overhead.
+// If you need to support larger chunks, increase this accordingly.
+const MAX_CHUNK_SIZE = 50 * 1024 * 1024; // 50 MB
+
+const upload = multer({
+  storage: multer.memoryStorage(),
+  limits: { fileSize: MAX_CHUNK_SIZE }
+});
+
+const uploadChunk = (req, res, next) => {
+  upload.single('chunk')(req, res, (err) => {
+    if (err) {
+      // Multer throws an error if the file is too large (or another multipart parsing issue occurs)
+      if (err.code === 'LIMIT_FILE_SIZE') {
+        return res.status(413).json({
+          success: false,
+          error: `Chunk too large (max ${Math.round(MAX_CHUNK_SIZE / (1024 * 1024))} MB).`,
+        });
+      }
+      return next(err);
+    }
+    next();
+  });
+};
 
 // API endpoint for multipart upload cleanup
 router.post('/api/cleanup-uploads', validateSessionAndRole('SuperAdmin'), async (req, res) => {
@@ -295,7 +320,7 @@ router.post('/upload-init', validateSessionAndRole('SuperAdmin'), async (req, re
 // S3 Multipart Upload — Step 2: Upload a part
 // FormData: chunk (file), partNumber (1-based integer), uploadId, key
 // Returns: { partNumber, ETag }
-router.post('/upload-chunk', validateSessionAndRole('SuperAdmin'), upload.single('chunk'), async (req, res) => {
+router.post('/upload-chunk', validateSessionAndRole('SuperAdmin'), uploadChunk, async (req, res) => {
   try {
     const { uploadId, key, partNumber } = req.body;
     if (!req.file || !uploadId || !key || !partNumber) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mbkbucket",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "description": "Flexible S3/R2 bucket management library and Express router for mbktech.org applications, providing upload, download, listing, and multipart utilities with built-in configuration validation and health checks",
   "author": "Muhammad Bin Khalid",
   "homepage": "https://github.com/MIbnEKhalid/mbkbucket#readme",