116 lines
3.3 KiB
JavaScript
116 lines
3.3 KiB
JavaScript
const express = require('express')
|
|
const multiparty = require('multiparty')
|
|
const path = require('path')
|
|
const fsa = require('fs')
|
|
const fs = fsa.promises
|
|
const sqlite = require('sqlite')
|
|
|
|
const router = express.Router()
|
|
const cfgLoader = require(path.join('..', '..', 'config-loader'))(path.join(__dirname, 'config.json'), {
|
|
database: 'index.db',
|
|
root: './files',
|
|
expiry: 2246400,
|
|
baseurl: 'https://i.lunasqu.ee/',
|
|
tokens: {}
|
|
})
|
|
|
|
function asyncForm (req, form) {
|
|
return new Promise(function (resolve, reject) {
|
|
form.parse(req, function(err, fields, files) {
|
|
if (err) return reject(err)
|
|
resolve({ fields, files })
|
|
})
|
|
})
|
|
}
|
|
|
|
async function init () {
|
|
let config = await cfgLoader
|
|
let root = path.resolve(config.root)
|
|
let baseurl = config.baseurl
|
|
|
|
await fs.access(root, fsa.constants.F_OK)
|
|
|
|
const dbPromise = Promise.resolve()
|
|
.then(() => sqlite.open(path.join(__dirname, config.database), { Promise, cache: true }))
|
|
.then(db => db.migrate({ migrationsPath: path.join(__dirname, 'migrations') }))
|
|
|
|
router.get('/:hash', async (req, res, next) => {
|
|
if (!req.params.hash) return res.status(400).send('Invalid request')
|
|
|
|
let db = await dbPromise
|
|
let file = await db.get('SELECT * FROM File WHERE path = ?', req.params.hash)
|
|
if (!file) return res.status(404).end()
|
|
|
|
res.header('Cache-Control', 'max-age=' + 7 * 24 * 60 * 60 * 1000)
|
|
res.sendFile(path.join(root, file.path))
|
|
})
|
|
|
|
router.post('/publish', async (req, res, next) => {
|
|
let token = req.header('token') || req.body.token
|
|
if (!token || !config.tokens[token]) return res.status(402).send('Forbidden')
|
|
|
|
// Handle multipart data
|
|
let form = new multiparty.Form()
|
|
let { fields, files } = await asyncForm(req, form)
|
|
|
|
// Detect all files
|
|
let allFiles = []
|
|
for (let i in files) {
|
|
for (let j in files[i]) {
|
|
allFiles.push(files[i][j])
|
|
}
|
|
}
|
|
|
|
if (!allFiles.length) return res.status(400).send('Invalid request')
|
|
|
|
// Determine real IP address
|
|
let ip
|
|
if (req.header('x-forwarded-for')) {
|
|
ip = req.header('x-forwarded-for')
|
|
} else {
|
|
ip = req.connection.remoteAddress
|
|
}
|
|
|
|
console.log('[%s] from %s request to upload %d file(s)', new Date(), ip, allFiles.length)
|
|
|
|
// Handle all files provided
|
|
let db = await dbPromise
|
|
let uploadedFiles = []
|
|
for (let i in allFiles) {
|
|
let file = allFiles[i]
|
|
let fname = file.originalFilename
|
|
let target = path.join(root, fname)
|
|
|
|
// Handle already exists case (overwrite)
|
|
try {
|
|
await fs.access(target, fsa.constants.F_OK)
|
|
await fs.unlink(target)
|
|
await fs.copyFile(file.path, target)
|
|
await fs.unlink(file.path)
|
|
|
|
await db.run('UPDATE File SET ip = ?, upload = ? WHERE path = ?', ip, new Date(), fname)
|
|
|
|
uploadedFiles.push(baseurl + fname)
|
|
continue
|
|
} catch (e) {
|
|
if (e.code !== 'ENOENT') throw e
|
|
}
|
|
|
|
// Copy to target and unlink temporary file
|
|
await fs.copyFile(file.path, target)
|
|
await fs.unlink(file.path)
|
|
|
|
await db.run('INSERT INTO File (path,ip,upload) VALUES (?,?,?)', fname, ip, new Date())
|
|
uploadedFiles.push(baseurl + fname)
|
|
}
|
|
|
|
if (uploadedFiles.length === 0) return res.status(400).send('No files were uploaded')
|
|
|
|
res.send(uploadedFiles.join('\n'))
|
|
})
|
|
|
|
return router
|
|
}
|
|
|
|
module.exports = init
|