Add basic Notes UI

routes/api/files/upload.tsx

@@ -20,7 +20,7 @@ export const handler: Handlers<Data, FreshContextState> = {
 
     const parentPath = requestBody.get('parent_path') as string;
     const name = requestBody.get('name') as string;
-    const contents = requestBody.get('contents') as File;
+    const contents = requestBody.get('contents') as File | string;
 
     if (
       !parentPath || !name.trim() || !contents || !parentPath.startsWith('/') ||
@@ -29,7 +29,9 @@ export const handler: Handlers<Data, FreshContextState> = {
       return new Response('Bad Request', { status: 400 });
     }
 
-    const createdFile = await createFile(context.state.user.id, parentPath, name.trim(), await contents.arrayBuffer());
+    const fileContents = typeof contents === 'string' ? contents : await contents.arrayBuffer();
+
+    const createdFile = await createFile(context.state.user.id, parentPath, name.trim(), fileContents);
 
     const newFiles = await getFiles(context.state.user.id, parentPath);
 

routes/api/notes/save.tsx

@@ -0,0 +1,66 @@
+import { Handlers } from 'fresh/server.ts';
+
+import { FreshContextState } from '/lib/types.ts';
+import { getFile, updateFile } from '/lib/data/files.ts';
+
+interface Data {}
+
+export interface RequestBody {
+  fileName: string;
+  currentPath: string;
+  contents: string;
+}
+
+export interface ResponseBody {
+  success: boolean;
+}
+
+export const handler: Handlers<Data, FreshContextState> = {
+  async POST(request, context) {
+    if (!context.state.user) {
+      return new Response('Unauthorized', { status: 401 });
+    }
+
+    const requestBody = await request.clone().json() as RequestBody;
+
+    if (
+      !requestBody.currentPath || !requestBody.fileName || !requestBody.currentPath.startsWith('/Notes/') ||
+      requestBody.currentPath.includes('../') || !requestBody.currentPath.endsWith('/')
+    ) {
+      return new Response('Bad Request', { status: 400 });
+    }
+
+    if (
+      !requestBody.currentPath || !requestBody.currentPath.startsWith('/Notes/') ||
+      requestBody.currentPath.includes('../')
+    ) {
+      return new Response('Bad Request', { status: 400 });
+    }
+
+    // Don't allow non-markdown files here
+    if (!requestBody.fileName.endsWith('.md')) {
+      return new Response('Not Found', { status: 404 });
+    }
+
+    const fileResult = await getFile(
+      context.state.user.id,
+      requestBody.currentPath,
+      decodeURIComponent(requestBody.fileName),
+    );
+
+    if (!fileResult.success) {
+      return new Response('Not Found', { status: 404 });
+    }
+
+    const updatedFile = await updateFile(
+      context.state.user.id,
+      requestBody.currentPath,
+      decodeURIComponent(requestBody.fileName),
+      requestBody.contents || '',
+    );
+
+    const responseBody: ResponseBody = { success: updatedFile };
+
+    return new Response(JSON.stringify(responseBody));
+  },
+};