Added Files API behind an alpha flag

refs https://github.com/TryGhost/Toolbox/issues/114

- Files API is meant to be used for non-executable file uploads of all sorts
- The files are stored and retrieved for download as-is

core/server/api/canary/files.js

@@ -0,0 +1,19 @@
+const storage = require('../../adapters/storage');
+
+module.exports = {
+    docName: 'files',
+    upload: {
+        statusCode: 201,
+        permissions: false,
+        async query(frame) {
+            const filePath = await storage.getStorage('files').save({
+                name: frame.file.originalname,
+                path: frame.file.path
+            });
+
+            return {
+                filePath
+            };
+        }
+    }
+};

core/server/api/canary/index.js

@@ -109,6 +109,10 @@ module.exports = {
         return shared.pipeline(require('./media'), localUtils);
     },
 
+    get files() {
+        return shared.pipeline(require('./files'), localUtils);
+    },
+
     get tags() {
         return shared.pipeline(require('./tags'), localUtils);
     },

core/server/api/canary/utils/serializers/output/files.js

@@ -0,0 +1,27 @@
+const config = require('../../../../../../shared/config');
+const {STATIC_FILES_URL_PREFIX} = require('@tryghost/constants');
+
+function getURL(urlPath) {
+    const media = new RegExp('^' + config.getSubdir() + '/' + STATIC_FILES_URL_PREFIX);
+    const absolute = media.test(urlPath) ? true : false;
+
+    if (absolute) {
+        // Remove the sub-directory from the URL because ghostConfig will add it back.
+        urlPath = urlPath.replace(new RegExp('^' + config.getSubdir()), '');
+        const baseUrl = config.getSiteUrl().replace(/\/$/, '');
+        urlPath = baseUrl + urlPath;
+    }
+
+    return urlPath;
+}
+
+module.exports = {
+    upload({filePath}, apiConfig, frame) {
+        return frame.response = {
+            files: [{
+                url: getURL(filePath),
+                ref: frame.data.ref || null
+            }]
+        };
+    }
+};

core/server/api/canary/utils/serializers/output/index.js

@@ -89,6 +89,10 @@ module.exports = {
         return require('./media');
     },
 
+    get files() {
+        return require('./files');
+    },
+
     get tags() {
         return require('./tags');
     },

core/server/web/api/canary/admin/routes.js

@@ -245,6 +245,14 @@ module.exports = function apiRoutes() {
         http(api.media.upload)
     );
 
+    // ## files
+    router.post('/files/upload',
+        labs.enabledMiddleware('filesAPI'),
+        mw.authAdminApi,
+        apiMw.upload.single('file'),
+        http(api.files.upload)
+    );
+
     // ## Invites
     router.get('/invites', mw.authAdminApi, http(api.invites.browse));
     router.get('/invites/:id', mw.authAdminApi, http(api.invites.read));

test/e2e-api/admin/files.test.js

@@ -0,0 +1,38 @@
+const path = require('path');
+const fs = require('fs-extra');
+const should = require('should');
+const supertest = require('supertest');
+const localUtils = require('./utils');
+const testUtils = require('../../utils');
+const config = require('../../../core/shared/config');
+
+describe('Files API', function () {
+    const files = [];
+    let request;
+
+    before(async function () {
+        await testUtils.startGhost();
+        request = supertest.agent(config.get('url'));
+        await localUtils.doAuth(request);
+    });
+
+    after(function () {
+        files.forEach(function (file) {
+            fs.removeSync(config.get('paths').appRoot + file);
+        });
+    });
+
+    it('Can upload a file', async function () {
+        const res = await request.post(localUtils.API.getApiQuery('files/upload'))
+            .set('Origin', config.get('url'))
+            .expect('Content-Type', /json/)
+            .field('ref', '934203942')
+            .attach('file', path.join(__dirname, '/../../utils/fixtures/images/loadingcat_square.gif'))
+            .expect(201);
+
+        res.body.files[0].url.should.match(new RegExp(`${config.get('url')}/content/files/\\d+/\\d+/loadingcat_square.gif`));
+        res.body.files[0].ref.should.equal('934203942');
+
+        files.push(res.body.files[0].url.replace(config.get('url'), ''));
+    });
+});