mirror of https://github.com/requarks/wiki
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
129 lines
2.7 KiB
129 lines
2.7 KiB
"use strict";
|
|
|
|
var express = require('express');
|
|
var router = express.Router();
|
|
|
|
var readChunk = require('read-chunk'),
|
|
fileType = require('file-type'),
|
|
Promise = require('bluebird'),
|
|
fs = Promise.promisifyAll(require('fs-extra')),
|
|
path = require('path'),
|
|
_ = require('lodash');
|
|
|
|
var validPathRe = new RegExp("^([a-z0-9\\/-]+\\.[a-z0-9]+)$");
|
|
var validPathThumbsRe = new RegExp("^([0-9]+\\.png)$");
|
|
|
|
// ==========================================
|
|
// SERVE UPLOADS FILES
|
|
// ==========================================
|
|
|
|
router.get('/t/*', (req, res, next) => {
|
|
|
|
let fileName = req.params[0];
|
|
if(!validPathThumbsRe.test(fileName)) {
|
|
return res.sendStatus(404).end();
|
|
}
|
|
|
|
//todo: Authentication-based access
|
|
|
|
res.sendFile(fileName, {
|
|
root: lcdata.getThumbsPath(),
|
|
dotfiles: 'deny'
|
|
}, (err) => {
|
|
if (err) {
|
|
res.status(err.status).end();
|
|
}
|
|
});
|
|
|
|
});
|
|
|
|
router.post('/img', lcdata.uploadImgHandler, (req, res, next) => {
|
|
|
|
let destFolder = _.chain(req.body.folder).trim().toLower().value();
|
|
|
|
upl.validateUploadsFolder(destFolder).then((destFolderPath) => {
|
|
|
|
if(!destFolderPath) {
|
|
res.json({ ok: false, msg: 'Invalid Folder' });
|
|
return true;
|
|
}
|
|
|
|
Promise.map(req.files, (f) => {
|
|
|
|
let destFilename = '';
|
|
let destFilePath = '';
|
|
|
|
return lcdata.validateUploadsFilename(f.originalname, destFolder).then((fname) => {
|
|
|
|
destFilename = fname;
|
|
destFilePath = path.resolve(destFolderPath, destFilename);
|
|
|
|
return readChunk(f.path, 0, 262);
|
|
|
|
}).then((buf) => {
|
|
|
|
//-> Check MIME type by magic number
|
|
|
|
let mimeInfo = fileType(buf);
|
|
if(!_.includes(['image/png', 'image/jpeg', 'image/gif', 'image/webp'], mimeInfo.mime)) {
|
|
return Promise.reject(new Error('Invalid file type.'));
|
|
}
|
|
return true;
|
|
|
|
}).then(() => {
|
|
|
|
//-> Move file to final destination
|
|
|
|
return fs.moveAsync(f.path, destFilePath, { clobber: false });
|
|
|
|
}).then(() => {
|
|
return {
|
|
ok: true,
|
|
filename: destFilename,
|
|
filesize: f.size
|
|
};
|
|
}).reflect();
|
|
|
|
}, {concurrency: 3}).then((results) => {
|
|
let uplResults = _.map(results, (r) => {
|
|
if(r.isFulfilled()) {
|
|
return r.value();
|
|
} else {
|
|
return {
|
|
ok: false,
|
|
msg: r.reason().message
|
|
};
|
|
}
|
|
});
|
|
res.json({ ok: true, results: uplResults });
|
|
return true;
|
|
}).catch((err) => {
|
|
res.json({ ok: false, msg: err.message });
|
|
return true;
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
router.get('/*', (req, res, next) => {
|
|
|
|
let fileName = req.params[0];
|
|
if(!validPathRe.test(fileName)) {
|
|
return res.sendStatus(404).end();
|
|
}
|
|
|
|
//todo: Authentication-based access
|
|
|
|
res.sendFile(fileName, {
|
|
root: git.getRepoPath() + '/uploads/',
|
|
dotfiles: 'deny'
|
|
}, (err) => {
|
|
if (err) {
|
|
res.status(err.status).end();
|
|
}
|
|
});
|
|
|
|
});
|
|
|
|
module.exports = router; |