501 download endpoint + upload records

[mehanana]

Implemented download endpoint and upload records; also added auth to the GET & POST endpoints

🎫 Issue #501 .

🎨 Figma Link :

▶ Changelist:

• Created a new uploads collection with a userId index in setup-indexes.ts
• Implemented the GET endpoint to retrieve the url and expiration time; also added auth check (requireUser)
• Implemented createSignedDownloadUrl to create the url
• Implemented recordUpload to add the upload to the database & created UploadRecord type
• Added auth check (requireUser) to POST endpoint

📝 Notes + 🚧 TODO:

• n/a

🧪 Testing:

• Signed in through a personal email & uploaded a file, then tested if I could call the GET endpoint successfully
• Signed in through a different email & tried to retrieve the same uploaded file with the GET endpoint and made sure it was unsuccessful
• Signed in as an admin & tried to retrieve the same uploaded file with the GET endpoint and made sure it was successful

🎥 Screenshots & Screencasts:

Signed in as mehana.nagarur@gmail.com, uploaded the file, and retrieved it successfully

Signed in as mehana.nagarur410@gmail.com (different user) and did not retrieve the file successfully

Signed in as mehana@hackbeanpot.com (admin) and retrieved the file successfully

Tried to retrieve a file that didn't exist

Not signed in and GET & POST endpoints did not work (403 forbidden)

Verified the uploaded file was in the upload collection:

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
core-live	Ready	Preview, Comment	Jul 26, 2026 12:58am
core-main	Ready	Preview, Comment	Jul 26, 2026 12:58am