POST /tenant/logo

2MB POST /api/tenant/logo Verify authentication and admin role with Clerk Logo upload is account-level admin only (super_admin) Apply rate limiting for file uploads Parse form data Validate file type Validate file size Generate unique filename Convert File to ArrayBuffer for upload Sanitize SVG files to remove potential XSS vectors Allow SVG elements Block dangerous tags Block event handlers Upload to Supabase Storage Get public URL Update tenant logo_url Add rate limit headers

Endpoint

POST /tenant/logo

Authentication

This endpoint requires authentication. Include your authentication token in the request headers.

Error Responses

Example Request

curl -X POST "https://api.allurelms.com/tenant/logo" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'