1 files changed, 43 insertions, 0 deletions
diff --git a/app/controllers/concerns/workhorse_authorization.rb b/app/controllers/concerns/workhorse_authorization.rb
new file mode 100644
index 00000000000..a290ba256b6
--- /dev/null
+++ b/app/controllers/concerns/workhorse_authorization.rb
@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+module WorkhorseAuthorization
+  extend ActiveSupport::Concern
+  include WorkhorseRequest
+
+  included do
+    skip_before_action :verify_authenticity_token, only: %i[authorize]
+    before_action :verify_workhorse_api!, only: %i[authorize]
+  end
+
+  def authorize
+    set_workhorse_internal_api_content_type
+
+    authorized = uploader_class.workhorse_authorize(
+      has_length: false,
+      maximum_size: maximum_size.to_i)
+
+    render json: authorized
+  rescue SocketError
+    render json: _("Error uploading file"), status: :internal_server_error
+  end
+
+  private
+
+  def file_is_valid?(file)
+    return false unless file.is_a?(::UploadedFile)
+
+    file_extension_whitelist.include?(File.extname(file.original_filename).downcase.delete('.'))
+  end
+
+  def uploader_class
+    raise NotImplementedError
+  end
+
+  def maximum_size
+    raise NotImplementedError
+  end
+
+  def file_extension_whitelist
+    ImportExportUploader::EXTENSION_WHITELIST
+  end
+end