make public storage and direct upload optional

app/controllers/api/attachments_controller.rb

@@ -7,7 +7,14 @@ module Api
     def create
       submitter = Submitter.find_by!(slug: params[:submitter_slug])
 
-      blob = ActiveStorage::Blob.find_signed(params[:blob_signed_id])
+      blob =
+        if (file = params[:file])
+          ActiveStorage::Blob.create_and_upload!(io: file.open,
+                                                 filename: file.original_filename,
+                                                 content_type: file.content_type)
+        else
+          ActiveStorage::Blob.find_signed(params[:blob_signed_id])
+        end
 
       attachment = ActiveStorage::Attachment.create!(
         blob:,

app/controllers/api/templates_documents_controller.rb

@@ -6,9 +6,7 @@ module Api
       @template = current_account.templates.find(params[:template_id])
 
       documents =
-        params[:blobs].map do |blob|
-          blob = ActiveStorage::Blob.find_signed(blob[:signed_id])
-
+        find_or_create_blobs.map do |blob|
           document = @template.documents.create!(blob:)
 
           Templates::ProcessDocument.call(document)
@@ -27,5 +25,19 @@ module Api
         )
       }
     end
+
+    private
+
+    def find_or_create_blobs
+      blobs = params[:blobs]&.map do |attrs|
+        ActiveStorage::Blob.find_signed(attrs[:signed_id])
+      end
+
+      blobs || params[:files].map do |file|
+        ActiveStorage::Blob.create_and_upload!(io: file.open,
+                                               filename: file.original_filename,
+                                               content_type: file.content_type)
+      end
+    end
   end
 end