Upload File

Upload a file and receive a public CDN URL and a path you can use to delete it later.

POST /api/storage/upload

Uploads a file using a multipart/form-data request and returns a public CDN URL. Save the path field from the response — you need it to delete the file later.

Required Header

x-api-key: your pk_live_… or sk_live_… key.

Do not set the Content-Type header manually when uploading files. When you pass a FormData object, the browser (or HTTP client) automatically sets the correct multipart/form-data boundary. Setting it manually will break the upload.

Request Body

Send the request as multipart/form-data with a single field:

file · file · required

The file to upload. Accepted as a binary file input (e.g., from an <input type="file"> element or a file buffer in Node.js).

Response Fields

message · string

Human-readable confirmation (e.g., "File uploaded successfully").

url · string

The public CDN URL where the file can be accessed. All uploaded files are publicly accessible — do not upload sensitive or private documents.

path · string

The internal storage path in the format PROJECT_ID/filename.ext. Save this value — you must provide it when deleting the file.

provider · string

The storage backend used (e.g., "internal").

File Limits

Limit	Value
Max file size	10 MB per file
Total storage quota	100 MB (default plan)

Code Examples

fetch (browser)

const fileInput = document.querySelector('input[type="file"]');
const formData = new FormData();
formData.append('file', fileInput.files[0]);

// Do NOT set Content-Type — the browser handles it automatically with FormData
const res = await fetch('https://api.ub.bitbros.in/api/storage/upload', {
  method: 'POST',
  headers: {
    'x-api-key': 'pk_live_YOUR_KEY'
    // No Content-Type header here!
  },
  body: formData
});

const { url, path, provider } = await res.json();

// Store `path` so you can delete the file later
console.log('File URL:', url);
console.log('File path (save this):', path);

Success Response

{
  "message": "File uploaded successfully",
  "url": "https://xyz.supabase.co/storage/v1/object/public/dev-files/PROJECT_ID/image.png",
  "path": "PROJECT_ID/image.png",
  "provider": "internal"
}

Errors

Status	Cause
400 Bad Request	Missing file field in the multipart form
401 Unauthorized	Missing or invalid API key
413 Payload Too Large	File exceeds the 10 MB size limit