87 lines
2.3 KiB
TypeScript
87 lines
2.3 KiB
TypeScript
/**
|
|
* The attachment routes, for images pasted into Markdown bodies.
|
|
*
|
|
* - `POST /api/attachments` — signed in. Stores an image (multipart `file`, at
|
|
* most 5 MB) and answers its id; it is bound to a resource once a saved body
|
|
* links it.
|
|
* - `GET /api/attachments/:attachmentId` — public. Serves the image.
|
|
*
|
|
* @module
|
|
*/
|
|
|
|
import { Router } from "@oak/oak";
|
|
import { authMiddleware } from "../middleware/auth.ts";
|
|
import {
|
|
createAttachment,
|
|
getAttachment,
|
|
} from "../services/attachment-service.ts";
|
|
import { APIErrorCode, type APIResponse } from "../../shared/api.ts";
|
|
import { APIException } from "../lib/api-exception.ts";
|
|
import type { AttachmentResponse } from "../../shared/dump.ts";
|
|
import {
|
|
ATTACHMENTS_DIR,
|
|
serveUploadedFile,
|
|
validateImageUpload,
|
|
} from "../lib/upload.ts";
|
|
|
|
/** The router serving the endpoints the module doc lists. */
|
|
const router: Router = new Router();
|
|
|
|
router.post("/api/attachments", authMiddleware, async (ctx) => {
|
|
const contentType = ctx.request.headers.get("content-type") ?? "";
|
|
if (!contentType.includes("multipart/form-data")) {
|
|
throw new APIException(
|
|
APIErrorCode.BAD_REQUEST,
|
|
400,
|
|
"Expected multipart/form-data",
|
|
);
|
|
}
|
|
|
|
const body = await ctx.request.body.formData();
|
|
const file = body.get("file");
|
|
|
|
if (!(file instanceof File)) {
|
|
throw new APIException(APIErrorCode.BAD_REQUEST, 400, "Missing file");
|
|
}
|
|
|
|
const data = new Uint8Array(await file.arrayBuffer());
|
|
const mime = validateImageUpload(data);
|
|
|
|
const attachmentId = crypto.randomUUID();
|
|
await Deno.mkdir(ATTACHMENTS_DIR, { recursive: true });
|
|
await Deno.writeFile(`${ATTACHMENTS_DIR}/${attachmentId}`, data);
|
|
try {
|
|
createAttachment(attachmentId, mime);
|
|
} catch (err) {
|
|
await Deno.remove(`${ATTACHMENTS_DIR}/${attachmentId}`).catch(() => {});
|
|
throw err;
|
|
}
|
|
|
|
const responseBody: APIResponse<AttachmentResponse> = {
|
|
success: true,
|
|
data: { id: attachmentId },
|
|
};
|
|
ctx.response.status = 201;
|
|
ctx.response.body = responseBody;
|
|
});
|
|
|
|
router.get("/api/attachments/:attachmentId", async (ctx) => {
|
|
const { attachmentId } = ctx.params;
|
|
|
|
let attachment;
|
|
try {
|
|
attachment = getAttachment(attachmentId);
|
|
} catch {
|
|
ctx.response.status = 404;
|
|
return;
|
|
}
|
|
|
|
await serveUploadedFile(
|
|
ctx,
|
|
`${ATTACHMENTS_DIR}/${attachmentId}`,
|
|
attachment.mime,
|
|
);
|
|
});
|
|
|
|
export default router;
|