🛂 (fileUpload) Improve file upload size limit enforcement

Closes #799, closes #797

packages/embeds/js/src/features/blocks/inputs/fileUpload/components/FileUploadForm.tsx

@@ -7,6 +7,7 @@ import { Button } from '@/components/Button'
 import { Spinner } from '@/components/Spinner'
 import { uploadFiles } from '../helpers/uploadFiles'
 import { guessApiHost } from '@/utils/guessApiHost'
+import { getRuntimeVariable } from '@typebot.io/env/getRuntimeVariable'
 
 type Props = {
   context: BotContext
@@ -25,15 +26,14 @@ export const FileUploadForm = (props: Props) => {
   const onNewFiles = (files: FileList) => {
     setErrorMessage(undefined)
     const newFiles = Array.from(files)
+    const sizeLimit =
+      props.block.options.sizeLimit ??
+      getRuntimeVariable('NEXT_PUBLIC_BOT_FILE_UPLOAD_MAX_SIZE')
     if (
-      newFiles.some(
-        (file) =>
-          file.size > (props.block.options.sizeLimit ?? 10) * 1024 * 1024
-      )
+      sizeLimit &&
+      newFiles.some((file) => file.size > sizeLimit * 1024 * 1024)
     )
-      return setErrorMessage(
-        `A file is larger than ${props.block.options.sizeLimit ?? 10}MB`
-      )
+      return setErrorMessage(`A file is larger than ${sizeLimit}MB`)
     if (!props.block.options.isMultipleAllowed && files)
       return startSingleFileUpload(newFiles[0])
     setSelectedFiles([...selectedFiles(), ...newFiles])

packages/embeds/js/src/features/blocks/inputs/fileUpload/helpers/uploadFiles.ts

@@ -28,6 +28,7 @@ export const uploadFiles = async ({
     i += 1
     const { data } = await sendRequest<{
       presignedUrl: string
+      formData: Record<string, string>
       fileUrl: string
     }>({
       method: 'POST',
@@ -40,9 +41,14 @@ export const uploadFiles = async ({
 
     if (!data?.presignedUrl) continue
     else {
+      const formData = new FormData()
+      Object.entries(data.formData).forEach(([key, value]) => {
+        formData.append(key, value)
+      })
+      formData.append('file', file)
       const upload = await fetch(data.presignedUrl, {
-        method: 'PUT',
-        body: file,
+        method: 'POST',
+        body: formData,
       })
 
       if (!upload.ok) continue