go 47 lines · 7 steps

Handling multipart profile uploads in Gin

A Gin handler binds a multipart form, validates and stores an uploaded avatar, then persists the profile.

Explained by highlit
Gin Intermediate form binding file upload validation multipart error handling
1package handlers
2 
3import (
4 "fmt"
5 "net/http"
6 "path/filepath"
7 "time"
8 
9 "github.com/gin-gonic/gin"
10 "github.com/google/uuid"
11)
12 
13type ProfileForm struct {
14 Name string `form:"name" binding:"required"`
15 Bio string `form:"bio" binding:"max=500"`
16 Birthday time.Time `form:"birthday" time_format:"2006-01-02"`
17 Tags []string `form:"tags"`
18 Avatar *multipart.FileHeader `form:"avatar" binding:"required"`
19}
20 
21func UpdateProfile(c *gin.Context) {
22 var form ProfileForm
23 if err := c.ShouldBind(&form); err != nil {
24 c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
25 return
26 }
27 
28 if form.Avatar.Size > 5<<20 {
29 c.JSON(http.StatusRequestEntityTooLarge, gin.H{"error": "avatar exceeds 5MB"})
30 return
31 }
32 
33 filename := fmt.Sprintf("%s%s", uuid.NewString(), filepath.Ext(form.Avatar.Filename))
34 dst := filepath.Join("uploads", "avatars", filename)
35 if err := c.SaveUploadedFile(form.Avatar, dst); err != nil {
36 c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to store avatar"})
37 return
38 }
39 
40 userID := c.GetString("userID")
41 if err := profiles.Update(c, userID, form.Name, form.Bio, form.Birthday, form.Tags, dst); err != nil {
42 c.JSON(http.StatusInternalServerError, gin.H{"error": "could not update profile"})
43 return
44 }
45 
46 c.JSON(http.StatusOK, gin.H{"name": form.Name, "avatar": dst})
47}
01 / 01
STEP 01

Walkthrough

Space play ←→ step click any line
Three takeaways
  1. 1Struct tags let Gin bind and validate multipart fields declaratively before any handler logic runs.
  2. 2Generating a random filename with the original extension avoids collisions and path-injection from user input.
  3. 3Guarding each fallible step with an early JSON response keeps the happy path flat and readable.

Related explainers

rust 
use axum::{
    extract::{Path, State},
    http::StatusCode,
    response::{IntoResponse, Response},

Typed error handling in an Axum handler

error-handling extractors validation
Intermediate 9 steps
go 
package metrics
 
import (
	"sync/atomic"

A lock-free request counter in Go

concurrency atomics lock-free
Intermediate 6 steps
typescript 
import { Module, Injectable } from '@nestjs/common';
import { ConfigModule, ConfigService } from '@nestjs/config';
import * as Joi from 'joi';
 

Validated, typed config in NestJS

configuration validation dependency-injection
Intermediate 6 steps
ruby 
class Webhooks::StripeController < ApplicationController
  skip_before_action :verify_authenticity_token
  skip_before_action :authenticate_user!
 

How a Rails Stripe webhook controller works

webhooks signature verification event dispatch
Intermediate 7 steps
java 
public record ServerConfig(String host, int port, boolean tls, List<String> allowedOrigins) {
 
    public ServerConfig {
        Objects.requireNonNull(host, "host is required");

Validating config with a Java record

records validation immutability
Intermediate 9 steps
go 
package middleware
 
import (
	"time"

Building a request logger middleware in Gin

middleware structured-logging closures
Intermediate 6 steps

Share this explainer

Here's the card — post it anywhere.

Handling multipart profile uploads in Gin — share card
Made with highlit — turn any snippet into a walkthrough like this in about a minute.
Explain your code