certd/packages/ui/certd-server/src/controller/basic/file-controller.ts

import { Controller, Fields, Files, Get, Inject, Post, Provide, Query } from "@midwayjs/core";
import { BaseController, Constants, FileService, PermissionException, UploadFileItem, uploadTmpFileCacheKey } from "@certd/lib-server";
import send from "koa-send";
import { nanoid } from "nanoid";
import { cache } from "@certd/basic";
import { UploadFileInfo } from "@midwayjs/upload";
import { AuthService } from "../../modules/sys/authority/service/auth-service.js";

const imageExtSet = new Set([".apng", ".avif", ".bmp", ".gif", ".ico", ".jpeg", ".jpg", ".png", ".svg", ".webp"]);
const imageCacheSeconds = 3 * 24 * 60 * 60;

export function isImageFile(filePath: string) {
  return imageExtSet.has(filePath.substring(filePath.lastIndexOf(".")).toLowerCase());
}

export function getImageDownloadOptions(filePath: string) {
  if (!isImageFile(filePath)) {
    return undefined;
  }
  return {
    maxage: imageCacheSeconds * 1000,
    setHeaders(res: any) {
      res.setHeader("Cache-Control", `public,max-age=${imageCacheSeconds}`);
    },
  };
}

/**
 */
@Provide()
@Controller("/api/basic/file")
export class FileController extends BaseController {
  @Inject()
  fileService: FileService;

  @Inject()
  authService: AuthService;

  @Post("/upload", { description: Constants.per.authOnly })
  async upload(@Files() files: UploadFileInfo<string>[], @Fields() fields: any, @Query("autoSave") autoSave: string) {
    console.log("files", files, fields);
    const cacheKey = uploadTmpFileCacheKey + nanoid();
    const file = files[0];
    cache.set(
      cacheKey,
      {
        filename: file.filename,
        tmpFilePath: file.data,
      } as UploadFileItem,
      {
        ttl: 1000 * 60 * 60,
      }
    );
    if (autoSave === "true") {
      const key = await this.fileService.saveFile(this.getUserId(), cacheKey, "public");
      return this.ok({
        key,
        url: `/api/basic/file/download?key=${encodeURIComponent(key)}`,
      });
    }
    return this.ok({
      key: cacheKey,
    });
  }

  @Get("/download", { description: Constants.per.guestOptionalAuth })
  async download(@Query("key") key: string) {
    const filePath = this.getDownloadFilePath(key);
    const sendOptions = getImageDownloadOptions(filePath);
    if (!sendOptions) {
      this.ctx.response.attachment(filePath);
    }
    await send(this.ctx, filePath, sendOptions);
  }

  private getDownloadFilePath(key: string) {
    const isPrivateFile = !key.startsWith("/public");
    const userId = isPrivateFile ? this.getUserId() : null;
    try {
      return this.fileService.getFile(key, userId);
    } catch (e) {
      if (!(e instanceof PermissionException) || !isPrivateFile || !this.authService.isAdmin(this.ctx)) {
        throw e;
      }
      const adminFilePath = this.fileService.getFile(key, userId, true);
      if (!isImageFile(adminFilePath)) {
        throw e;
      }
      return adminFilePath;
    }
  }
}