Build apps

File uploads

crow.files stores uploads in buckets you declare in crow.json. Each bucket has its own rules, size limit and allowed types.

#Declare a bucket

{
  "files": {
    "receipts": { "read": "creator", "write": "viewers", "maxSize": "10MB", "types": ["image/*", "application/pdf"] }
  }
}

#Upload and use files

const receipts = crow.files.bucket("receipts");

const f = await receipts.upload(input.files[0]);   // { id, name, size, type, createdBy, createdAt, url }
img.src = receipts.url(f.id);                      // use it in <img>, <a href> or fetch()

const { files, cursor } = await receipts.list({ limit: 50, mine: true });
await receipts.get(f.id);                          // the record, or null
await receipts.remove(f.id);

#Uploads from signed-out visitors

On a public app, write: "public-add" lets signed-out visitors upload files up to 5 MB each.

#Safety

HTML and SVG uploads are always served as downloads, never as pages, so an upload can't run code on your app's address.

#Limits

Files are up to 25 MB each (100 MB for companies). Storage counts toward your plan: see Plans and billing. The dashboard's Data tab lists every bucket's files with their sizes and a delete button.