Working

server/api/users/avatars/index.delete.ts

@@ -0,0 +1,24 @@
+export default defineEventHandler(async (event) => {
+  const { user, session } = await requireUserSession(event)
+
+  if (!user.avatar) {
+    return sendNoContent(event, 204)
+  }
+
+  await deleteProfilePicture(user.avatar)
+
+  const updatedUser = {
+    ...user,
+    avatar: null,
+  }
+  await updateUser(user.id, { avatar: updatedUser.avatar })
+  await replaceUserSession(event, {
+    id: user.id,
+    user: updatedUser,
+  })
+
+  return {
+    statusCode: 204,
+    message: 'Avatar deleted',
+  }
+})

server/api/users/avatars/index.post.ts

@@ -0,0 +1,40 @@
+import { randomUUID } from 'uncrypto'
+
+export default defineEventHandler(async (event) => {
+  const { user } = await requireUserSession(event)
+
+  const form = await readFormData(event)
+  const file = form.get('file') as File
+
+  if (!file || !file.size) {
+    throw createError({ statusCode: 400, message: 'No file provided' })
+  }
+
+  ensureBlob(file, {
+    maxSize: '1MB',
+    types: ['image'],
+  })
+
+  if (user.avatar) {
+    await deleteProfilePicture(user.avatar)
+  }
+
+  const filename = randomUUID()
+
+  const avatar = await hubBlob().put(filename, file, {
+    addRandomSuffix: false,
+    prefix: 'avatars/',
+  })
+
+  const updatedUser = {
+    ...user,
+    avatar: avatar.pathname,
+  }
+  await updateUser(user.id, { avatar: updatedUser.avatar })
+  await replaceUserSession(event, {
+    id: user.id,
+    user: updatedUser,
+  })
+
+  return sendNoContent(event, 204)
+})