idio.js

const { app, url, middleware, router } = await idio({
  cors: {
    use: true,
    origin: PROD && [FRONT_END, HOST],
    credentials: true,
  },
  compress: { use: true },
  form: {
    dest: 'upload',
  },
  frontend: { use: !PROD },
  static: [{ use: CLOSURE, root: 'docs' }, {
    use: true,
    root: 'upload',
  }],
  session: { keys: [SESSION_KEY] },
})

router.post('/upload',
  // 1. enable session
  middleware.session,
  // 2. validate session existance
  (ctx, next) => {
    if (!ctx.session.github_user) throw new Error('!Authorisation required.')
    return next()
  },
  // 3. read incoming message stream with photo form data
  (ctx, next) => middleware.form.single('image')(ctx, next),
  // 4. ensure token from the query
  middleware.csrf,
  // 5. process the photo
  async (ctx) => {
    const { ext } = parse(ctx.file.originalname)
    ctx.body = {
      photoId: sync(18),
      success: 1,
      result: `/upload/${ctx.file.filename}${ext}`,
    }
  }
)