Multipart uploads alpha working

This still need some QA and testing but it works.

Author: gjolly

DESIGN.md

@@ -331,13 +331,8 @@ Authorization: Bearer <JWT>
 **Request:**
 
 ```http
-POST /files
+POST /file
 Authorization: Bearer <JWT>
-Content-Type: application/json
-
-{
-    "total_size": 104857600
-}
 ```
 
 **Response:**
@@ -371,7 +366,7 @@ Content-Type: application/json
 **Request:**
 
 ```http
-GET /files/{file_id}/upload
+GET /file/{file_id}/upload
 Authorization: Bearer <JWT>
 ```
 

TODO.md

@@ -8,3 +8,4 @@
 - Don't use "CREATE TABLE IF NOT EXISTS" on every request, create the table during a setup phase or check for its existence in a more efficient way
 - User better rate limiting, probably involving CAPTCHAs for unauthenticated endpoints
 - Add tests for positive /auth/token and replay attacks
+- Fix test slowness due to reliance on R2.

r2-cors-dev.json

@@ -0,0 +1,14 @@
+{
+	"rules": [
+		{
+			"id": "cryptdrive-test-frontend",
+			"allowed": {
+				"origins": ["http://localhost:8787"],
+				"methods": ["GET", "PUT", "POST", "DELETE", "HEAD"],
+				"headers": ["*"]
+			},
+			"exposeHeaders": ["ETag", "Content-Length"],
+			"maxAgeSeconds": 3600
+		}
+	]
+}

r2-cors.json

@@ -0,0 +1,14 @@
+{
+	"rules": [
+		{
+			"id": "cryptdrive-frontend",
+			"Allowed": {
+				"origin": "https://cryptdrive.gauthier.workers.dev",
+				"methods": ["GET", "PUT", "POST", "DELETE", "HEAD"],
+				"headers": ["*"]
+			},
+			"exposeHeaders": ["ETag", "Content-Length"],
+			"maxAgeSeconds": 3600
+		}
+	]
+}