make sure we always return JSON encoded errors.

fill from server: accepted keys.

validator hook, called by fiber via server keyauth.New().

validator hook, validates incoming api key against form id, which also acts as onetime api key.

delete form.

returns just one form obj + error code.

Render the upload html form.

returns the whole list + error code, no post processing by server.

Calculate if time is up based on start time.Time and duration.

Wrapper to respond with proper json status, message and code, shall be prepared and called by the handlers directly.

vaious helbers.

generate return url.

Extract form file[s] and store them on disk, returns a list of files.

Send an email via an external mail gateway.

Used for non json-aware handlers, called by server */.

Retrieve the API Context name from the session, assuming is has been successfully authenticated.

Retrieve the formid (aka onetime api key) from the session.

delete file, id dir and db entry.

returns just one upload obj + error code, no post processing by server.

returns the whole list + error code, no post processing by server.

Create a zip archive from a directory FIXME: -e option, if any, goes here.

these vars can be savely global, since they don't change ever.

sessions are context specific and can be global savely.

wrapper for bolt db.

incoming id.

Binding from JSON, data coming from user, not tainted.