add dynamic profile update, connection helper, file download metadata

- replace UserSetColor/UserSetPronouns with single UserUpdateProfile that dynamically builds one UPDATE query from UserProfileUpdateList
- add getConnectionWithResponseOnFail helper to deduplicate connection ID parsing and validation across handlers
- rename file.go to attachmentFile.go and update handler names
- GetDownloadUrlAndMetadata now fetches object metadata via StatObject and returns it alongside the presigned URL
- file download endpoint returns JSON with url and originalName
- add description field to user and DB schema
- remove unused ConnectionState variants (GroupFellow, GroupFriend)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

packages/httpRequest/user.go

@@ -2,11 +2,13 @@ package httpRequest
 
 import (
 	json2 "encoding/json"
+	"go-socket/packages/convertions"
+	"go-socket/packages/globals"
+	"go-socket/packages/minio"
 	"net/http"
 	"time"
 
 	"go-socket/packages/cache"
-	"go-socket/packages/convertions"
 	"go-socket/packages/passwords"
 	"go-socket/packages/postgresql"
 	"go-socket/packages/tokens"
@@ -137,8 +139,7 @@ func HandleUserDelete(response http.ResponseWriter, request *http.Request) {
 	response.WriteHeader(http.StatusAccepted)
 }
 
-// HandleUserModifyAppearance currently just color
-func HandleUserModifyAppearance(response http.ResponseWriter, request *http.Request) {
+func HandleUserModProfile(response http.ResponseWriter, request *http.Request) {
 	if !postValidCheckWithResponseOnFail(&response, request, false) {
 		return
 	}
@@ -150,13 +151,37 @@ func HandleUserModifyAppearance(response http.ResponseWriter, request *http.Requ
 		return
 	}
 
-	color, err := convertions.StringToRgba(request.FormValue("color"))
-	if err != nil {
-		http.Error(response, "invalid color", http.StatusBadRequest)
-		return
+	var updateList types.UserProfileUpdateList
+
+	if pronouns := request.FormValue("pronouns"); pronouns != "" {
+		if len(pronouns) > 32 {
+			http.Error(response, "pronouns too long", http.StatusBadRequest)
+			return
+		}
+		user.Pronouns = pronouns
+		updateList.Pronouns = true
 	}
-	user.Color = color
-	err = postgresql.UserSetColor(ctx, user)
+
+	if description := request.FormValue("description"); description != "" {
+		if len(description) > 256 {
+			http.Error(response, "description too long", http.StatusBadRequest)
+			return
+		}
+		user.Description = description
+		updateList.Description = true
+	}
+
+	if colorStr := request.FormValue("color"); colorStr != "" {
+		color, err := convertions.StringToRgba(colorStr)
+		if err != nil {
+			http.Error(response, "invalid color", http.StatusBadRequest)
+			return
+		}
+		user.Color = color
+		updateList.Color = true
+	}
+
+	err = postgresql.UserUpdateProfile(ctx, user, updateList)
 	if err != nil {
 		http.Error(response, "internal server error", http.StatusInternalServerError)
 		return
@@ -164,30 +189,46 @@ func HandleUserModifyAppearance(response http.ResponseWriter, request *http.Requ
 	response.WriteHeader(http.StatusAccepted)
 }
 
-// HandleUserModifyAbout currently just pronouns
-func HandleUserModifyAbout(response http.ResponseWriter, request *http.Request) {
-	if !postValidCheckWithResponseOnFail(&response, request, false) {
+func HandleUserModAvatar(response http.ResponseWriter, request *http.Request) {
+
+	if !postValidCheckWithResponseOnFail(&response, request, true) {
 		return
 	}
-
 	ctx := request.Context()
-	user, err := getUserByToken(ctx, request.FormValue("token"))
+
+	user, err := getUserByToken(ctx, request.Header.Get("token"))
 	if err != nil {
 		http.Error(response, "invalid token", http.StatusUnauthorized)
 		return
 	}
 
-	pronouns := request.FormValue("pronouns")
-	if len(pronouns) > 25 || len(pronouns) < 2 {
-		http.Error(response, "invalid pronouns", http.StatusBadRequest)
+	request.Body = http.MaxBytesReader(response, request.Body, int64(globals.MaxPostWithFileBytes))
+
+	if err = request.ParseMultipartForm(int64(globals.MaxPostBytes)); err != nil {
+		http.Error(response, "invalid multipart form", http.StatusBadRequest)
 		return
 	}
 
-	user.Pronouns = pronouns
-	err = postgresql.UserSetPronouns(ctx, user)
-	if err != nil {
-		http.Error(response, "internal server error", http.StatusInternalServerError)
+	conn, ok := getConnectionWithResponseOnFail(&response, request, user)
+	if !ok {
+		return
+	}
+
+	file, header, err := request.FormFile("file")
+	if err != nil {
+		http.Error(response, "missing file", http.StatusBadRequest)
+		return
+	}
+	defer file.Close()
+
+	contentType := header.Header.Get("Content-Type")
+	key := minio.GetKey(conn.Id, contentType, minio.File)
+
+	if err = minio.Upload(ctx, key, file, header.Size, contentType, map[string]string{
+		"originalName": header.Filename,
+		"uploaderId":   user.Id.String(),
+	}); err != nil {
+		http.Error(response, "upload failed", http.StatusInternalServerError)
 		return
 	}
-	response.WriteHeader(http.StatusAccepted)
 }