express-fileupload

Simple express middleware for uploading files.

Security Notice

Please install version 1.1.10+ of this package to avoid a security vulnerability in Node/EJS related to JS prototype pollution. This vulnerability is only applicable if you have the parseNested option set to true (it is false by default).

Install

# With NPM
npm i express-fileupload

# With Yarn
yarn add express-fileupload

Usage

When you upload a file, the file will be accessible from req.files.

Example:

• You're uploading a file called car.jpg
• Your input's name field is foo: <input name="foo" type="file" />
• In your express server request, you can access your uploaded file from req.files.foo:

app.post('/upload', function(req, res) {
  console.log(req.files.foo); // the uploaded file object
});

The req.files.foo object will contain the following:

• req.files.foo.name: "car.jpg"
• req.files.foo.mv: A function to move the file elsewhere on your server. Can take a callback or return a promise.
• req.files.foo.mimetype: The mimetype of your file
• req.files.foo.data: A buffer representation of your file, returns empty buffer in case useTempFiles option was set to true.
• req.files.foo.tempFilePath: A path to the temporary file in case useTempFiles option was set to true.
• req.files.foo.truncated: A boolean that represents if the file is over the size limit
• req.files.foo.size: Uploaded size in bytes
• req.files.foo.md5: MD5 checksum of the uploaded file

Notes about breaking changes with MD5 handling:

• Before 1.0.0, md5 is an MD5 checksum of the uploaded file.
• From 1.0.0 until 1.1.1, md5 is a function to compute an MD5 hash (Read about it here.).
• From 1.1.1 onward, md5 is reverted back to MD5 checksum value and also added full MD5 support in case you are using temporary files.

Examples

• Example Project
• Basic File Upload
• Multi-File Upload

Using Busboy Options

Pass in Busboy options directly to the express-fileupload middleware. Check out the Busboy documentation here.

app.use(fileUpload({
  limits: { fileSize: 50 * 1024 * 1024 },
}));

Using useTempFile Options

Use temp files instead of memory for managing the upload process.

// Note that this option available for versions 1.0.0 and newer. 
app.use(fileUpload({
    useTempFiles : true,
    tempFileDir : '/tmp/'
}));

Using debug option

You can set debug option to true to see some logging about upload process. In this case middleware uses console.log and adds Express-file-upload prefix for outputs.

It will show you whether the request is invalid and also common events triggered during upload. That can be really useful for troubleshooting and we recommend attaching debug output to each issue on Github.

Output example:

Express-file-upload: Temporary file path is /node/express-fileupload/test/temp/tmp-16-1570084843942
Express-file-upload: New upload started testFile->car.png, bytes:0
Express-file-upload: Uploading testFile->car.png, bytes:21232...
Express-file-upload: Uploading testFile->car.png, bytes:86768...
Express-file-upload: Upload timeout testFile->car.png, bytes:86768
Express-file-upload: Cleaning up temporary file /node/express-fileupload/test/temp/tmp-16-1570084843942...

Description:

• Temporary file path is... says that useTempfiles was set to true and also shows you temp file name and path.
• New upload started testFile->car.png says that new upload started with field testFile and file name car.png.
• Uploading testFile->car.png, bytes:21232... shows current progress for each new data chunk.
• Upload timeout means that no data came during uploadTimeout.
• Cleaning up temporary file Here finaly we see cleaning up of the temporary file because of upload timeout reached.

Available Options

Pass in non-Busboy options directly to the middleware. These are express-fileupload specific options.

Help Wanted

Looking for additional maintainers. Please contact richardgirges [ at ] gmail.com if you're interested. Pull Requests are welcomed!

Thanks & Credit

Brian White for his stellar work on the Busboy Package and the connect-busboy Package