Middleware/upload.js

const multer = require('multer');
const path = require('path');

const storage = multer.memoryStorage();

// Enforce 5MB max and allow only common image types and PDFs (for specific endpoints)
const upload = multer({
  storage,
  limits: { fileSize: 5 * 1024 * 1024 },
  fileFilter: (req, file, cb) => {
    const allowedTypes = /jpeg|jpg|png|gif|webp|pdf/;
    const extname = allowedTypes.test(
      path.extname(file.originalname).toLowerCase(),
    );
    const mimetype = allowedTypes.test(file.mimetype.toLowerCase());
    if (mimetype && extname) return cb(null, true);
    cb(
      new Error(
        'Only image files (jpg, jpeg, png, gif, webp) or PDF up to 5MB are allowed.',
      ),
    );
  },
});

module.exports = upload;