This is a WIP for advanced file sharing, but I won't pursue this for now since using symlinks in the file system works for me, and this is adding a ton of complexity I don't want or need right now.
56 lines
1.5 KiB
TypeScript
56 lines
1.5 KiB
TypeScript
import { Handlers } from 'fresh/server.ts';
|
|
|
|
import { Directory, FreshContextState } from '/lib/types.ts';
|
|
import { deleteDirectoryOrFile, getDirectories, getDirectoryAccess } from '/lib/data/files.ts';
|
|
|
|
interface Data {}
|
|
|
|
export interface RequestBody {
|
|
parentPath: string;
|
|
name: string;
|
|
}
|
|
|
|
export interface ResponseBody {
|
|
success: boolean;
|
|
newDirectories: Directory[];
|
|
}
|
|
|
|
export const handler: Handlers<Data, FreshContextState> = {
|
|
async POST(request, context) {
|
|
if (!context.state.user) {
|
|
return new Response('Unauthorized', { status: 401 });
|
|
}
|
|
|
|
const requestBody = await request.clone().json() as RequestBody;
|
|
|
|
if (
|
|
!requestBody.parentPath || !requestBody.name?.trim() || !requestBody.parentPath.startsWith('/') ||
|
|
requestBody.parentPath.includes('../')
|
|
) {
|
|
return new Response('Bad Request', { status: 400 });
|
|
}
|
|
|
|
const { hasWriteAccess, ownerUserId, ownerParentPath } = await getDirectoryAccess(
|
|
context.state.user.id,
|
|
requestBody.parentPath,
|
|
requestBody.name.trim(),
|
|
);
|
|
|
|
if (!hasWriteAccess) {
|
|
return new Response('Forbidden', { status: 403 });
|
|
}
|
|
|
|
const deletedDirectory = await deleteDirectoryOrFile(
|
|
ownerUserId,
|
|
ownerParentPath,
|
|
requestBody.name.trim(),
|
|
);
|
|
|
|
const newDirectories = await getDirectories(context.state.user.id, requestBody.parentPath);
|
|
|
|
const responseBody: ResponseBody = { success: deletedDirectory, newDirectories };
|
|
|
|
return new Response(JSON.stringify(responseBody));
|
|
},
|
|
};
|