feat: fully implement profile controller;

feat: implement file upload handling in controller with size and type validation;
feat: add custom validation rules for bio and color hex fields;
refactor: enhance request handling with dedicated client info extraction;
chore: update profile DTOs with validation tags;
docs: profile controller swagger

backend/internal/controllers/controller.go

@@ -22,10 +22,14 @@ import (
 	"easywish/internal/services"
 	"easywish/internal/utils/enums"
 	"easywish/internal/validation"
+	"fmt"
 	"net/http"
+	"os"
+	"path/filepath"
 
 	"github.com/gin-gonic/gin"
 	"github.com/go-playground/validator/v10"
+	"github.com/google/uuid"
 	"go.uber.org/zap"
 )
 
@@ -75,12 +79,45 @@ func (ctrl *controllerImpl) Setup(group *gin.RouterGroup, log *zap.Logger, auth
 					}
 				}),
 				method.Function)...,
-		)}
+		)
+	}
+}
+
+func GetFile(c *gin.Context, name string, maxSize int64, allowedTypes map[string]bool) (*string, error) {
+	file, err := c.FormFile(name); if err != nil {
+		c.AbortWithStatusJSON(http.StatusBadRequest, gin.H{"error": fmt.Sprintf("File '%s': not provided", name)})
+		return nil, err
+	}
+
+	if file.Size > int64(maxSize) {
+		c.AbortWithStatusJSON(http.StatusBadRequest, gin.H{"error": fmt.Sprintf("File '%s': file too large", name)})
+		return nil, fmt.Errorf("File too large")
+	}
+
+	fileType := file.Header.Get("Content-Type")
+	if len(allowedTypes) > 0 && !allowedTypes[fileType] {
+		c.AbortWithStatusJSON(http.StatusBadRequest, gin.H{"error": fmt.Sprintf("File '%s': forbidden file type: %s", name, fileType)})
+		return nil, fmt.Errorf("Wrong file type")
+	}
+
+	folderPath := "/tmp/uploads"
+	if _, err := os.Stat(folderPath); os.IsNotExist(err) {
+    os.MkdirAll(folderPath, 0700)
+	}
+
+	filePath := fmt.Sprintf("%s/%s-%s", folderPath, uuid.New().String(), filepath.Base(file.Filename))
+	if err := c.SaveUploadedFile(file, filePath); err != nil {
+		c.AbortWithStatusJSON(http.StatusInternalServerError, gin.H{"error": "Error saving file"})
+		return nil, err
+	}
+
+	return &filePath, nil
 }
 
 func GetRequest[ModelT any](c *gin.Context) (*dto.Request[ModelT], error) {
 
 	var body ModelT
+
 	if err := c.ShouldBindJSON(&body); err != nil {
 		c.AbortWithStatusJSON(http.StatusBadRequest, gin.H{"error": err.Error()})
 		return nil, err
@@ -97,6 +134,16 @@ func GetRequest[ModelT any](c *gin.Context) (*dto.Request[ModelT], error) {
 		return nil, err
 	}
 
+	cinfo := GetClientInfo(c)
+
+	return &dto.Request[ModelT]{
+		Body: body,
+		User: cinfo,
+	}, nil
+}
+
+func GetClientInfo(c * gin.Context) (dto.ClientInfo) {
+
 	cinfoFromCtx, ok := c.Get("client_info"); if !ok {
 		c.AbortWithStatusJSON(
 			http.StatusInternalServerError,
@@ -105,8 +152,5 @@ func GetRequest[ModelT any](c *gin.Context) (*dto.Request[ModelT], error) {
 	}
 	cinfo := cinfoFromCtx.(dto.ClientInfo)
 
-	return &dto.Request[ModelT]{
-		Body: body,
-		User: cinfo,
-	}, nil
+	return cinfo
 }