HMT-112-profile-picture-storage

amplify/auth/PostConfirmation/handler.ts

@@ -53,6 +53,7 @@ export const handler: PostConfirmationTriggerHandler = async (event) => {
   const cognitoGroupResponse = await cognitoClient.send(command);
 
   const DDBResponse = await dataClient.models.User.create({
+    profilePicture: "",
     firstName: "",
     lastName: "",
     role: "Participant",

amplify/backend.ts

@@ -3,9 +3,12 @@ import { auth } from "@/amplify/auth/resource";
 import { data } from "@/amplify/data/resource";
 import { defineBackend } from "@aws-amplify/backend";
 
+import { storage } from "./storage/resource";
+
 const backend = defineBackend({
   auth,
   data,
+  storage,
 });
 
 // Cognito Email Overrides

amplify/data/resource.ts

@@ -16,6 +16,7 @@ const schema = a
     User: a
       .model({
         id: a.id().required(),
+        profilePicture: a.string(),
         firstName: a.string(),
         lastName: a.string(),
         role: a

amplify/storage/resource.ts

@@ -0,0 +1,24 @@
+import { defineStorage } from "@aws-amplify/backend";
+
+export const storage = defineStorage({
+  name: "profileImageStorage",
+  access: (allow) => ({
+    "public/*": [
+      allow.authenticated.to(["read", "write", "delete"]),
+      allow.groups(["Participant"]).to(["read", "write"]),
+      allow.groups(["Judge"]).to(["read", "write", "delete"]),
+      allow.groups(["Admin"]).to(["read", "write", "delete"]),
+    ],
+    "private/${user}/profilePicture/*": [
+      // Allow users to manage their own profile pictures
+      allow.authenticated.to(["read", "write", "delete"]),
+      allow.groups(["Admin"]).to(["read", "write", "delete"]),
+    ],
+    "media/*": [
+      allow.authenticated.to(["read", "write", "delete"]),
+      allow.groups(["Participant"]).to(["read", "write"]),
+      allow.groups(["Judge"]).to(["read", "write", "delete"]),
+      allow.groups(["Admin"]).to(["read", "write", "delete"]),
+    ],
+  }),
+});

next.config.js

@@ -1,7 +1,13 @@
 /** @type {import('next').NextConfig} */
 const nextConfig = {
   images: {
-    domains: ["images.ctfassets.net"],
+    domains: ["images.ctfassets.net", "s3.ca-central-1.amazonaws.com"],
+    remotePatterns: [
+      {
+        protocol: "https",
+        hostname: "**",
+      },
+    ],
   },
 };