feat(social): add friends, private chats, inbox and music sharing

services/api/internal/auth/middleware.go

@@ -122,6 +122,9 @@ func Middleware(svc *Service, log *slog.Logger) func(http.Handler) http.Handler
 			if route == "POST /api/v1/admin/users/import" {
 				r.Body = http.MaxBytesReader(w, r.Body, MaxUserArchiveBytes)
 			}
+			if r.Method == http.MethodPost && strings.HasPrefix(r.URL.Path, "/api/v1/me/social/") {
+				r.Body = http.MaxBytesReader(w, r.Body, 32<<10)
+			}
 			next.ServeHTTP(w, r.WithContext(WithPrincipal(ctx, p)))
 		})
 	}