Request Profile Image Upload URL

Request a presigned URL for uploading the authenticated job seeker profile image

POST /api/v1/job-seekers/me/profile-image/presigned-url

Request Profile Image Upload URL

cURL

curl --request POST \
  --url https://api.example.com/api/v1/job-seekers/me/profile-image/presigned-url \
  --header 'Content-Type: application/json' \
  --data '
{
  "fileName": "<string>",
  "mimeType": "<string>"
}
'

import requests

url = "https://api.example.com/api/v1/job-seekers/me/profile-image/presigned-url"

payload = {
    "fileName": "<string>",
    "mimeType": "<string>"
}
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({fileName: '<string>', mimeType: '<string>'})
};

fetch('https://api.example.com/api/v1/job-seekers/me/profile-image/presigned-url', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/api/v1/job-seekers/me/profile-image/presigned-url",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'fileName' => '<string>',
    'mimeType' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/api/v1/job-seekers/me/profile-image/presigned-url"

	payload := strings.NewReader("{\n  \"fileName\": \"<string>\",\n  \"mimeType\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.example.com/api/v1/job-seekers/me/profile-image/presigned-url")
  .header("Content-Type", "application/json")
  .body("{\n  \"fileName\": \"<string>\",\n  \"mimeType\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.example.com/api/v1/job-seekers/me/profile-image/presigned-url")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n  \"fileName\": \"<string>\",\n  \"mimeType\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

Endpoint

POST /api/v1/job-seekers/me/profile-image/presigned-url

Base URL: http://localhost:3000/api/v1

This endpoint requires authentication and Job Seeker role.

Authentication

Include the access token in the Authorization header:

Authorization: Bearer YOUR_ACCESS_TOKEN

Description

Requests a presigned URL for uploading a job seeker profile image directly to Cloudflare R2.

This is step 1 of the image upload flow:

1. Request presigned upload URL from API
2. Upload file directly to storage with PUT {uploadUrl}
3. Confirm upload with the API

Request Body

fileName · string · required

Original image file name, for example avatar.png.

mimeType · string · required

Image MIME type. Supported values: image/jpeg, image/png, image/webp.

Request Shape

interface RequestProfileImageUploadDto {
  fileName: string;
  mimeType: 'image/jpeg' | 'image/png' | 'image/webp';
}

Request Example

{
  "fileName": "avatar.png",
  "mimeType": "image/png"
}

Response

Success Response (200 OK)

{
  "success": true,
  "data": {
    "uploadUrl": "https://careerk-media.c0485e90a90f9be9ecd4e72559fee834.r2.cloudflarestorage.com/profile-images/f35b1c20-b18e-4902-9461-23bb653ee5fa/1776332930558-avatar.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=a14238f39390c8c7f0581e7801787531%2F20260416%2Fauto%2Fs3%2Faws4_request&X-Amz-Date=20260416T094850Z&X-Amz-Expires=3600&X-Amz-Signature=fd8f2606c79dc66b24a5b7ffffa07a9528217de6b00bc631cedc548f93173af6&X-Amz-SignedHeaders=host&x-id=PutObject",
    "key": "profile-images/f35b1c20-b18e-4902-9461-23bb653ee5fa/1776332930558-avatar.png",
    "fileUrl": "https://pub-5c37ea83b99f48918e67ed5fdda1be98.r2.dev/profile-images/f35b1c20-b18e-4902-9461-23bb653ee5fa/1776332930558-avatar.png"
  },
  "message": "Profile image upload URL generated successfully",
  "meta": {
    "timestamp": "2026-04-23T20:00:00.000Z",
    "path": "/job-seekers/me/profile-image/presigned-url",
    "method": "POST"
  }
}

Response Shape

interface RequestProfileImageUploadResponse {
  success: true;
  data: {
    uploadUrl: string;
    key: string;
    fileUrl: string;
  };
  message: 'Profile image upload URL generated successfully';
  meta: {
    timestamp: string;
    path: '/job-seekers/me/profile-image/presigned-url';
    method: 'POST';
  };
}

Error Responses

400 Bad Request - Invalid MIME Type

{
  "success": false,
  "error": {
    "message": ["mimeType must be one of the following values: image/jpeg, image/png, image/webp"],
    "statusCode": 400,
    "timestamp": "2026-04-23T20:00:00.000Z",
    "path": "/job-seekers/me/profile-image/presigned-url",
    "method": "POST",
    "details": "Bad Request"
  }
}

401 Unauthorized

{
  "success": false,
  "error": {
    "message": "Unauthorized",
    "statusCode": 401,
    "timestamp": "2026-04-23T20:00:00.000Z",
    "path": "/job-seekers/me/profile-image/presigned-url",
    "method": "POST",
    "details": "Unauthorized"
  }
}

403 Forbidden

{
  "success": false,
  "error": {
    "message": "Forbidden resource",
    "statusCode": 403,
    "timestamp": "2026-04-23T20:00:00.000Z",
    "path": "/job-seekers/me/profile-image/presigned-url",
    "method": "POST",
    "details": "Forbidden"
  }
}

Next Steps

1. Upload the raw file to uploadUrl using PUT (see Upload Profile Image File)
2. Do not send a bearer token to the storage URL
3. Confirm the upload using Confirm Profile Image Upload

The direct upload request goes to storage, not to the CareerK API. Use the returned uploadUrl exactly as-is.