POST /v1/api/recruiters/me/entreprise/logo HTTP/1.1
Authorization: Bearer <OWNER_TOKEN>
Content-Type: multipart/form-data

file=@logo.png

{
  "logoUrl": "https://cdn.wethehivers.com/public/entreprises/18/logo.webp",
  "variants": {
    "512": "https://cdn.wethehivers.com/public/entreprises/18/logo-512.webp",
    "256": "https://cdn.wethehivers.com/public/entreprises/18/logo-256.webp",
    "128": "https://cdn.wethehivers.com/public/entreprises/18/logo-128.webp"
  }
}

POST /v1/api/recruiters/me/entreprise/banner HTTP/1.1
file=@banner-1920x1080.jpg

POST /v1/api/recruiters/me/entreprise/staff-photos HTTP/1.1
Content-Type: multipart/form-data

files=@photo1.jpg
files=@photo2.jpg
caption=Équipe dev Douala

PUT /v1/api/recruiters/me/entreprise/staff-photos/order
{ "order": [15, 12, 18, 14] }

DELETE /v1/api/recruiters/me/entreprise/staff-photos/12

POST /v1/api/candidats/me/photo HTTP/1.1
file=@profile.jpg

POST /v1/api/candidats/me/cv HTTP/1.1
file=@cv.pdf

POST /v1/api/admin/blog/14/cover HTTP/1.1
file=@cover.jpg

GET /v1/api/files/cv/17  → 200 {url, expiresAt} ou 302 redirect

DELETE /v1/api/candidats/me/cv/17
DELETE /v1/api/recruiters/me/entreprise/logo

async function uploadCV(file, onProgress) {
  const form = new FormData();
  form.append('file', file);

  const xhr = new XMLHttpRequest();
  xhr.open('POST', '/v1/api/candidats/me/cv');
  xhr.setRequestHeader('Authorization', `Bearer ${token}`);
  xhr.upload.onprogress = (e) => {
    if (e.lengthComputable) onProgress(e.loaded / e.total);
  };
  return new Promise((resolve, reject) => {
    xhr.onload = () => resolve(JSON.parse(xhr.response));
    xhr.onerror = () => reject(new Error('Upload failed'));
    xhr.send(form);
  });
}