Profile picture endpoints

backend/.env.sample

@@ -5,6 +5,10 @@ DB_PORT=""
 DB_NAME=""
 PORT="8080"
 APP_LOG_LEVEL="info"
+AWS_S3_ACCESS_KEY_ID=""
+AWS_S3_SECRET_ACCESS_KEY_ID=""
+AWS_S3_REGION=""
+AWS_S3_BUCKET_NAME=""
 
 DEV_CLERK_SECRET_KEY="secret"
 DEV_CLERK_WEBHOOK_SIGNATURE="secret"

backend/cmd/clerk/sync_test.go

@@ -8,6 +8,7 @@ import (
 	"testing"
 
 	"github.com/generate/selfserve/internal/models"
+	storage "github.com/generate/selfserve/internal/service/storage/postgres"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )
@@ -24,6 +25,29 @@ func (m *mockUsersRepositorySync) BulkInsertUsers(ctx context.Context, users []*
 	return m.bulkInsertFunc(ctx, users)
 }
 
+func (m *mockUsersRepositorySync) FindUser(ctx context.Context, id string) (*models.User, error) {
+	return nil, nil
+}
+
+func (m *mockUsersRepositorySync) UpdateProfilePicture(ctx context.Context, userId string, key string) error {
+	return nil
+}
+
+func (m *mockUsersRepositorySync) DeleteProfilePicture(ctx context.Context, userId string) error {
+	return nil
+}
+
+func (m *mockUsersRepositorySync) GetKey(ctx context.Context, userId string) (string, error) {
+	return "", nil
+}
+
+func (m *mockUsersRepositorySync) UpdateUser(ctx context.Context, id string, update *models.UpdateUser) (*models.User, error) {
+	return nil, nil
+}
+
+// Makes the compiler verify the mock implements the interface
+var _ storage.UsersRepository = (*mockUsersRepositorySync)(nil)
+
 func TestSyncUsers(t *testing.T) {
 	t.Parallel()
 

backend/config/config.go

@@ -3,8 +3,8 @@ package config
 type Config struct {
 	Application `env:",prefix=APP_"`
 	DB          `env:",prefix=DB_"`
+	S3          `env:",prefix=AWS_S3_"`
 	LLM         `env:",prefix=LLM_"`
 	Clerk       `env:",prefix=CLERK_"`
-	S3          `env:",prefix=AWS_S3_"`
 	OpenSearch  `env:",prefix=OPENSEARCH_"`
 }

backend/docs/swagger.yaml

@@ -595,6 +595,13 @@ definitions:
         description: nil when no more pages
         type: string
     type: object
+  internal_handler.UpdateProfilePictureRequest:
+    description: Request body containing the S3 key after uploading
+    properties:
+      key:
+        example: profile-pictures/user123/1706540000.jpg
+        type: string
+    type: object
 host: localhost:8080
 info:
   contact:
@@ -1246,6 +1253,114 @@ paths:
       summary: Get Floors
       tags:
       - rooms
+  /s3/presigned-get-url/{key}:
+    get:
+      consumes:
+      - application/json
+      description: Generates a presigned URL for a file. The key is the full S3 path
+        (e.g., profile-pictures/user123/image.jpg)
+      parameters:
+      - description: File key (full path after /presigned-url/)
+        in: path
+        name: key
+        required: true
+        type: string
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: Presigned URL
+          schema:
+            type: string
+        "400":
+          description: Bad Request
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "500":
+          description: Internal Server Error
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+      summary: Generate a presigned URL for a file
+      tags:
+      - s3
+  /s3/presigned-url/{key}:
+    get:
+      consumes:
+      - application/json
+      description: Generates a presigned URL for a file. The key is the full S3 path
+        (e.g., profile-pictures/user123/image.jpg)
+      parameters:
+      - description: File key (full path after /presigned-url/)
+        in: path
+        name: key
+        required: true
+        type: string
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: Presigned URL
+          schema:
+            type: string
+        "400":
+          description: Bad Request
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "500":
+          description: Internal Server Error
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+      summary: Generate a presigned URL for a file
+      tags:
+      - s3
+  /s3/upload-url/{userId}:
+    get:
+      description: Generates a presigned S3 URL and unique key for uploading a profile
+        picture. After uploading to S3, use PUT /users/{userId}/profile-picture to
+        save the key.
+      parameters:
+      - description: User ID
+        in: path
+        name: userId
+        required: true
+        type: string
+      - default: jpg
+        description: File extension (jpg, jpeg, png, webp)
+        in: query
+        name: ext
+        type: string
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: Returns presigned_url and key
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "400":
+          description: Bad Request
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "500":
+          description: Internal Server Error
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+      summary: Get presigned URL for profile picture upload
+      tags:
+      - s3
   /users:
     post:
       consumes:
@@ -1320,14 +1435,14 @@ paths:
     put:
       consumes:
       - application/json
-      description: Updates fields on a user
+      description: Updates allowed fields on a user
       parameters:
       - description: User ID
         in: path
         name: id
         required: true
         type: string
-      - description: User update data
+      - description: Fields to update
         in: body
         name: request
         required: true
@@ -1360,7 +1475,124 @@ paths:
             type: object
       security:
       - BearerAuth: []
-      summary: Updates a user
+      summary: Update user
+      tags:
+      - users
+  /users/{userId}/profile-picture:
+    delete:
+      consumes:
+      - application/json
+      description: Deletes the user's profile picture from the database
+      parameters:
+      - description: User ID
+        in: path
+        name: userId
+        required: true
+        type: string
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "400":
+          description: Bad Request
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "500":
+          description: Internal Server Error
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+      summary: Delete user's profile picture
+      tags:
+      - users
+    get:
+      consumes:
+      - application/json
+      description: Retrieves the user's profile picture key and returns a presigned
+        URL for display
+      parameters:
+      - description: User ID
+        in: path
+        name: userId
+        required: true
+        type: string
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: Returns key and presigned_url if profile picture exists
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "400":
+          description: Bad Request
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "404":
+          description: No profile picture found
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "500":
+          description: Internal Server Error
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+      summary: Get user's profile picture
+      tags:
+      - users
+    put:
+      consumes:
+      - application/json
+      description: Saves the S3 key to the user's profile after the image has been
+        uploaded to S3
+      parameters:
+      - description: User ID
+        in: path
+        name: userId
+        required: true
+        type: string
+      - description: S3 key from upload
+        in: body
+        name: request
+        required: true
+        schema:
+          $ref: '#/definitions/internal_handler.UpdateProfilePictureRequest'
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "400":
+          description: Bad Request
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "500":
+          description: Internal Server Error
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+      summary: Update user's profile picture
       tags:
       - users
 schemes: