Navy.gif/homepage
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

allow upload via token

Browse Source
This commit is contained in:
Erik 2022-03-26 14:17:48 +02:00
parent 75eab36889
commit b82a0f7bf9
No known key found for this signature in database
GPG Key ID: FEFF4B220DDF5589
1 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
server/src/client/endpoints/api/Upload.js
View File

@ -1,7 +1,7 @@
const fileUpload = require('express-fileupload'); const fileUpload = require('express-fileupload');
const { APIEndpoint } = require('../../interfaces'); const { APIEndpoint } = require('../../interfaces');
const { CheckAuth, Permissions } = require('../../middleware'); const { CheckSessionOrToken, Permissions } = require('../../middleware');
class Login extends APIEndpoint { class Login extends APIEndpoint {
@ -17,7 +17,7 @@ class Login extends APIEndpoint {
['post', this.upload.bind(this)] ['post', this.upload.bind(this)]
]; ];
this.middleware = [CheckAuth, Permissions('upload'), fileUpload({ limits: { fileSize: 1024*1024*1024, files: 1 } })]; this.middleware = [CheckSessionOrToken, Permissions('upload'), fileUpload({ limits: { fileSize: 1024*1024*1024, files: 1 } })];
this.init(); this.init();
@ -26,9 +26,14 @@ class Login extends APIEndpoint {
async upload(req, res) { async upload(req, res) {
const { body: { name }, files: { file } } = req; const { body: { name }, files: { file } } = req;
if (!file) return res.status(400).end(); if (!file) return res.status(400).send('Missing file?');
if (!file.mimetype !== 'video/mp4' || !file.name.endsWith('.mp4')) return res.status(400).send('Invalid type'); if (file.mimetype !== 'video/mp4') {
return res.status(400).send('Invalid mimetype');
}
if (!file.name.endsWith('.mp4')) {
return res.status(400).send('Invalid format');
}
this.logger.info(`${req.user.username}#${req.user.discriminator} is uploading ${name}`); this.logger.info(`${req.user.username}#${req.user.discriminator} is uploading ${name}`);
try { try {