mastodon/app/controllers/api/v1/media_controller.rb

class Api::V1::MediaController < ApiController
  before_action :doorkeeper_authorize!
  respond_to    :json

  def create
    @media = MediaAttachment.create!(account: current_user.account, file: params[:file])
  end
end