ba8b77e4e1
Remove old workarounds in rest/handlers and replace them with simple func(http.ResponseWriter, *http.Request) that we return from controller functions
102 lines
2.3 KiB
Go
102 lines
2.3 KiB
Go
package rest
|
|
|
|
import (
|
|
"context"
|
|
"io"
|
|
"net/http"
|
|
"net/url"
|
|
|
|
"github.com/pkg/errors"
|
|
|
|
"github.com/crusttech/crust/internal/auth"
|
|
"github.com/crusttech/crust/messaging/internal/repository"
|
|
"github.com/crusttech/crust/messaging/internal/service"
|
|
"github.com/crusttech/crust/messaging/rest/request"
|
|
)
|
|
|
|
var _ = errors.Wrap
|
|
|
|
type (
|
|
Attachment struct {
|
|
att service.AttachmentService
|
|
}
|
|
)
|
|
|
|
func (Attachment) New() *Attachment {
|
|
ctrl := &Attachment{}
|
|
ctrl.att = service.DefaultAttachment
|
|
return ctrl
|
|
}
|
|
|
|
func (ctrl Attachment) Original(ctx context.Context, r *request.AttachmentOriginal) (interface{}, error) {
|
|
if err := ctrl.isAccessible(r.AttachmentID, r.UserID, r.Sign); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return ctrl.serve(ctx, r.AttachmentID, false, r.Download)
|
|
}
|
|
|
|
func (ctrl *Attachment) Preview(ctx context.Context, r *request.AttachmentPreview) (interface{}, error) {
|
|
if err := ctrl.isAccessible(r.AttachmentID, r.UserID, r.Sign); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return ctrl.serve(ctx, r.AttachmentID, true, false)
|
|
}
|
|
|
|
func (ctrl Attachment) isAccessible(attachmentID, userID uint64, signature string) error {
|
|
if userID == 0 {
|
|
return errors.New("missing or invalid user ID")
|
|
}
|
|
|
|
if attachmentID == 0 {
|
|
return errors.New("missing or invalid attachment ID")
|
|
}
|
|
|
|
if auth.DefaultSigner.Verify(signature, userID, attachmentID) {
|
|
return errors.New("missing or invalid signature")
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (ctrl Attachment) serve(ctx context.Context, ID uint64, preview, download bool) (interface{}, error) {
|
|
return func(w http.ResponseWriter, req *http.Request) {
|
|
att, err := ctrl.att.With(ctx).FindByID(ID)
|
|
|
|
if err != nil {
|
|
switch {
|
|
case err == repository.ErrAttachmentNotFound:
|
|
w.WriteHeader(http.StatusNotFound)
|
|
default:
|
|
http.Error(w, err.Error(), http.StatusInternalServerError)
|
|
}
|
|
|
|
return
|
|
}
|
|
|
|
var fh io.ReadSeeker
|
|
|
|
if preview {
|
|
fh, err = ctrl.att.OpenPreview(att)
|
|
} else {
|
|
fh, err = ctrl.att.OpenOriginal(att)
|
|
}
|
|
|
|
if err != nil {
|
|
http.Error(w, err.Error(), http.StatusInternalServerError)
|
|
return
|
|
}
|
|
|
|
name := url.QueryEscape(att.Name)
|
|
|
|
if download {
|
|
w.Header().Add("Content-Disposition", "attachment; filename="+name)
|
|
} else {
|
|
w.Header().Add("Content-Disposition", "inline; filename="+name)
|
|
}
|
|
|
|
http.ServeContent(w, req, name, att.CreatedAt, fh)
|
|
}, nil
|
|
}
|