chore: import upstream snapshot with attribution

api/http/handler/upload/handler.go

@@ -0,0 +1,27 @@
+package upload
+
+import (
+	"net/http"
+
+	portainer "github.com/portainer/portainer/api"
+	"github.com/portainer/portainer/api/http/security"
+	httperror "github.com/portainer/portainer/pkg/libhttp/error"
+
+	"github.com/gorilla/mux"
+)
+
+// Handler is the HTTP handler used to handle upload operations.
+type Handler struct {
+	*mux.Router
+	FileService portainer.FileService
+}
+
+// NewHandler creates a handler to manage upload operations.
+func NewHandler(bouncer security.BouncerService) *Handler {
+	h := &Handler{
+		Router: mux.NewRouter(),
+	}
+	h.Handle("/upload/tls/{certificate:(?:ca|cert|key)}",
+		bouncer.AdminAccess(httperror.LoggerHandler(h.uploadTLS))).Methods(http.MethodPost)
+	return h
+}

api/http/handler/upload/upload_tls.go

@@ -0,0 +1,63 @@
+package upload
+
+import (
+	"net/http"
+
+	portainer "github.com/portainer/portainer/api"
+	"github.com/portainer/portainer/api/filesystem"
+	httperror "github.com/portainer/portainer/pkg/libhttp/error"
+	"github.com/portainer/portainer/pkg/libhttp/request"
+	"github.com/portainer/portainer/pkg/libhttp/response"
+)
+
+// @id UploadTLS
+// @summary Upload TLS files
+// @description Use this environment(endpoint) to upload TLS files.
+// @description **Access policy**: administrator
+// @tags upload
+// @security ApiKeyAuth
+// @security jwt
+// @accept multipart/form-data
+// @produce json
+// @param certificate path string true "TLS file type. Valid values are 'ca', 'cert' or 'key'." Enums(ca,cert,key)
+// @param folder formData string true "Folder where the TLS file will be stored. Will be created if not existing"
+// @param file formData file true "The file to upload"
+// @success 204 "Success"
+// @failure 400 "Invalid request"
+// @failure 500 "Server error"
+// @router /upload/tls/{certificate} [post]
+func (handler *Handler) uploadTLS(w http.ResponseWriter, r *http.Request) *httperror.HandlerError {
+	certificate, err := request.RetrieveRouteVariableValue(r, "certificate")
+	if err != nil {
+		return httperror.BadRequest("Invalid certificate route variable", err)
+	}
+
+	folder, err := request.RetrieveMultiPartFormValue(r, "folder", false)
+	if err != nil {
+		return httperror.BadRequest("Invalid query parameter: folder", err)
+	}
+
+	file, _, err := request.RetrieveMultiPartFormFile(r, "file")
+	if err != nil {
+		return httperror.BadRequest("Invalid certificate file. Ensure that the certificate file is uploaded correctly", err)
+	}
+
+	var fileType portainer.TLSFileType
+	switch certificate {
+	case "ca":
+		fileType = portainer.TLSFileCA
+	case "cert":
+		fileType = portainer.TLSFileCert
+	case "key":
+		fileType = portainer.TLSFileKey
+	default:
+		return httperror.BadRequest("Invalid certificate route value. Value must be one of: ca, cert or key", filesystem.ErrUndefinedTLSFileType)
+	}
+
+	_, err = handler.FileService.StoreTLSFileFromBytes(folder, fileType, file)
+	if err != nil {
+		return httperror.InternalServerError("Unable to persist certificate file on disk", err)
+	}
+
+	return response.Empty(w)
+}