Function otaHttpPostHandler

src/platforms/esp/32/ota/ota_impl.cpp.hpp:474–594

@brief HTTP handler for POST requests to /update (firmware upload) @param req HTTP request handle @return ESP_OK on success

/// @param req HTTP request handle
/// @return ESP_OK on success
esp_err_t otaHttpPostHandler(httpd_req_t *req) {
    // Get HTTP context from user context
    OTAHttpContext* ctx = (OTAHttpContext*)req->user_ctx;

    // SECURITY: Require authentication for firmware upload
    if (!checkBasicAuth(req, ctx->password)) {
        return ESP_FAIL;  // Response already sent by checkBasicAuth
    }

    esp_ota_handle_t ota_handle = 0;
    const esp_partition_t* update_partition = nullptr;
    bool ota_started = false;
    size_t total_received = 0;

    // Get expected content length for progress tracking
    size_t content_length = req->content_len;

    // Get OTA partition
    update_partition = esp_ota_get_next_update_partition(nullptr);
    if (!update_partition) {
        if (ctx->error_cb && *ctx->error_cb) {
            (*ctx->error_cb)("No OTA partition found");
        }
        httpd_resp_send_err(req, HTTPD_500_INTERNAL_SERVER_ERROR, "No OTA partition found");
        return ESP_FAIL;
    }

    // Receive data in chunks
    char buffer[1024];
    int received;
    bool first_chunk = true;
    esp_err_t err;

    while ((received = httpd_req_recv(req, buffer, sizeof(buffer))) > 0) {
        // Validate firmware header on first chunk
        if (first_chunk) {
            if (!validateESP32Firmware((const u8*)buffer, received)) {
                if (ctx->error_cb && *ctx->error_cb) {
                    (*ctx->error_cb)("Invalid ESP32 firmware image");
                }
                httpd_resp_send_err(req, HTTPD_400_BAD_REQUEST, "Invalid ESP32 firmware image");
                return ESP_FAIL;
            }

            // Begin OTA after validation passes
            err = esp_ota_begin(update_partition, OTA_SIZE_UNKNOWN, &ota_handle);
            if (err != ESP_OK) {
                if (ctx->error_cb && *ctx->error_cb) {
                    (*ctx->error_cb)("OTA begin failed");
                }
                httpd_resp_send_err(req, HTTPD_500_INTERNAL_SERVER_ERROR, "OTA begin failed");
                return ESP_FAIL;
            }
            ota_started = true;
            first_chunk = false;
        }

        // Write to flash