Revision of Hmmm - Opengist

TheRealToxicDev 修订了这个 Gist 1694332962. 跳至此修订

1 file changed, 0 insertions, 0 deletions

gistfile1.txt 重命名为 gistfile1.js

File renamed without changes

TheRealToxicDev 修订了这个 Gist 1694332954. 跳至此修订

1 file changed, 223 insertions

gistfile1.txt(file created)

		@@ -0,0 +1,223 @@
1	+	import cordxConfig from '@/src/configurations/cordx.config'
2	+	import makeId from '@/utils/functions/makeId'
3	+	import sqlQuery from '@/utils/functions/sqlQuery'
4	+	//import webhook from '@/utils/functions/webhook'
5	+	import { Request, Response } from 'express'
6	+	import Formidable from 'formidable-serverless'
7	+	import { S3 } from '@aws-sdk/client-s3'
8	+	import { PutObjectCommand } from '@aws-sdk/client-s3'
9	+	import fs from 'fs'
10	+
11	+	export const config = {
12	+	api: { bodyParser: false }
13	+	}
14	+
15	+	function formatSizeUnits(bytes) {
16	+	if (bytes >= 1073741824) {
17	+	bytes = (bytes / 1073741824).toFixed(2) + ' GB'
18	+	} else if (bytes >= 1048576) {
19	+	bytes = (bytes / 1048576).toFixed(2) + ' MB'
20	+	} else if (bytes >= 1024) {
21	+	bytes = (bytes / 1024).toFixed(2) + ' KB'
22	+	} else if (bytes > 1) {
23	+	bytes = bytes + ' bytes'
24	+	} else if (bytes == 1) {
25	+	bytes = bytes + ' byte'
26	+	} else {
27	+	bytes = '0 bytes'
28	+	}
29	+	return bytes
30	+	}
31	+
32	+	export default async function POST(req: Request, res: Response) {
33	+	const space = new S3({
34	+	forcePathStyle: false,
35	+	endpoint: process.env.DoCdnLink,
36	+	region: 'us-east-1',
37	+	credentials: {
38	+	accessKeyId: process.env.DoKeyId,
39	+	secretAccessKey: process.env.DoSecret
40	+	}
41	+	})
42	+
43	+	if (req.method !== 'POST') return res.status(400).send('Invalid method')
44	+
45	+	return new Promise(async (resolve, reject) => {
46	+	const form = new Formidable.IncomingForm({
47	+	multiples: true,
48	+	keepExtensions: true
49	+	})
50	+
51	+	form.on('aborted', () => {
52	+	reject(
53	+	res.status(500).send(
54	+	JSON.stringify({
55	+	status: '[UPLOAD_FAILED]',
56	+	errormsg: 'client aborted the request',
57	+	url: '[CORDX]: aborted'
58	+	})
59	+	)
60	+	)
61	+	})
62	+
63	+	form.on('error', async e => {
64	+	await console.log(e.stack)
65	+
66	+	reject(
67	+	res.status(500).send(
68	+	JSON.stringify({
69	+	status: 'UPLOAD_ERROR',
70	+	errormsg: `${e.message}`,
71	+	url: ''
72	+	})
73	+	)
74	+	)
75	+	})
76	+
77	+	return form.parse(req, async function (err, fields, files) {
78	+	let secret = req?.headers?.secret
79	+	let userid = req?.headers?.userid
80	+	let file = files.sharex
81	+	const data = await fs.readFileSync(file.path)
82	+	let nameExt = file.name.substr(file.name.lastIndexOf('.') + 1)
83	+	let fileId = await makeId({ length: cordxConfig.sharexConfig.defaults.fileNameLength })
84	+	const getBase = req => `${process.env.NODE_ENV === 'development' ? 'http' : 'https'}://${req.headers.host}`
85	+	let user = await sqlQuery({ query: `SELECT * FROM users WHERE secret="${secret}"` }).then(i => i)
86	+
87	+	if (err) {
88	+	await console.log(err.stack)
89	+
90	+	return res.status(500).send(
91	+	JSON.stringify({
92	+	status: 'UPLOAD_ERROR',
93	+	errormsg: `${err.message}`,
94	+	url: '[CORDX]: error occurred'
95	+	})
96	+	)
97	+	}
98	+
99	+	if (!secret)
100	+	return res.status(400).send(
101	+	JSON.stringify({
102	+	status: 'NO_SECRET_HEADER',
103	+	errormsg: 'No secret provided in header params',
104	+	url: '[CORDX]: unable to locate secret'
105	+	})
106	+	)
107	+
108	+	if (!userid)
109	+	return res.status(400).send(
110	+	JSON.stringify({
111	+	status: 'NO_USERID_HEADER',
112	+	errormsg: 'No userid provided in header params',
113	+	url: '[CORDX]: unable to locate userid'
114	+	})
115	+	)
116	+
117	+	if (!user)
118	+	return res.status(400).send(
119	+	JSON.stringify({
120	+	status: 'NO_USERID_HEADER',
121	+	errormsg: 'No userid provided in header params',
122	+	url: '[CORDX]: unable to locate userid'
123	+	})
124	+	)
125	+
126	+	if (secret && secret !== user[0].secret)
127	+	return res.status(400).send(
128	+	JSON.stringify({
129	+	status: 'INVALID_SECRET_HEADER',
130	+	errormsg: 'The provided secret does not match our records for the provided user',
131	+	url: '[CORDX]: unable to locate valid secret'
132	+	})
133	+	)
134	+
135	+	if (!file)
136	+	return res.status(400).send(
137	+	JSON.stringify({
138	+	status: 'NO_POST_DATA',
139	+	errormsg: 'No valid uploads provided',
140	+	url: '[CORDX]: No post data received'
141	+	})
142	+	)
143	+	else {
144	+	if (file.size >= 52428800)
145	+	return res.status(400).send(
146	+	JSON.stringify({
147	+	status: 'FILE_SIZE_LIMITED',
148	+	errormsg:
149	+	'Whoops, looks like you have hit your file size limit. We currently limit uploads to `50M`',
150	+	url: '[CORDX]: file size limited'
151	+	})
152	+	)
153	+
154	+	let bucketParams = {
155	+	Bucket: 'cordx',
156	+	Body: data,
157	+	ACL: 'public-read',
158	+	ContentType: 'image/png',
159	+	Key: `${userid}/${fileId}.${nameExt}`
160	+	}
161	+
162	+	await space
163	+	.send(new PutObjectCommand(bucketParams))
164	+	.then(async () => {
165	+	let imgUrl = `https://cordx.${process.env.DoShortLink}/${userid}/${fileId}.${nameExt}`
166	+
167	+	await sqlQuery({
168	+	query: `INSERT INTO images (userid, fileid, filename) VALUES ("${userid}", "${fileId}", "${fileId}.${nameExt}")`
169	+	}).catch(async e => {
170	+	await console.error(`${e.stack}`)
171	+
172	+	return reject(
173	+	res.status(500).send(
174	+	JSON.stringify({
175	+	status: 'POST_ERROR',
176	+	errormsg: `${e.message}`,
177	+	url: '[CORDX]: oops, something went wrong'
178	+	})
179	+	)
180	+	)
181	+	})
182	+
183	+	/**await webhook({
184	+	userid: userid,
185	+	webhook: user[0].webhook,
186	+	link: imgUrl
187	+	})*/
188	+
189	+	return resolve(
190	+	res.status(200).send(
191	+	JSON.stringify({
192	+	status: 'OK',
193	+	errormsg: '',
194	+	url: `${getBase(req)}/users/${userid}/${fileId}.${nameExt}`
195	+	})
196	+	)
197	+	)
198	+	})
199	+	.catch(async e => {
200	+	await console.error(e)
201	+
202	+	return reject(
203	+	res.status(500).send(
204	+	JSON.stringify({
205	+	status: 'POST_ERROR',
206	+	errormsg: `${e.message}`,
207	+	url: '[CORDX]: oops, something went wrong'
208	+	})
209	+	)
210	+	)
211	+	})
212	+
213	+	return res.status(200).send(
214	+	JSON.stringify({
215	+	status: 'OK',
216	+	errormsg: '',
217	+	url: `${getBase(req)}/users/${userid}/${fileId}.${nameExt}`
218	+	})
219	+	)
220	+	}
221	+	})
222	+	})
223	+	}

更新更早