openhands
17847545dd
- Remove .prettierrc (dead config, Biome replaces Prettier) - Rename lighthouserc.json to lighthouserc.cjs with module.exports for ESM compat - Add logger.warn to empty catch blocks in auth, register, site-settings, prisma-cache, redis, security, rate-limit - Unify ActionResult type: action-helper.ts uses 'ok' consistent with safe-action-shared.ts - Add noUnusedLocals + noUnusedParameters to tsconfig + fix 25 pre-existing unused vars - Replace barrel export src/types/index.ts with direct @/types/common imports - Make trustHost conditional (development only) in auth.ts - Add pre-flight URL validation to update-Nitrov3.sh to catch image.library.url misconfigurations - Improve NITRO_IMAGE_LIBRARY_URL content validation in pre-flight & post-compute checks
84 lines
2.9 KiB
TypeScript
84 lines
2.9 KiB
TypeScript
"use server";
|
|
|
|
import { mkdir, writeFile } from "node:fs/promises";
|
|
import path from "node:path";
|
|
import { revalidatePath } from "next/cache";
|
|
import { requirePermission } from "@/lib/admin/guard";
|
|
import { MEDIA_ROOT, resolveMediaPath } from "@/lib/media-storage";
|
|
import { PERMS } from "@/lib/permissions";
|
|
|
|
const MAX_SIZE = 5 * 1024 * 1024; // 5MB
|
|
const ALLOWED = ["image/png", "image/jpeg", "image/gif", "image/webp"];
|
|
|
|
export async function uploadMedia(
|
|
formData: FormData,
|
|
): Promise<{ ok: boolean; error?: string }> {
|
|
await requirePermission(PERMS.PAGES_EDIT);
|
|
const file = formData.get("file") as File | null;
|
|
if (!file || file.size === 0) return { ok: false, error: "No file provided" };
|
|
if (file.size > MAX_SIZE)
|
|
return { ok: false, error: "File too large (max 5MB)" };
|
|
if (!ALLOWED.includes(file.type))
|
|
return {
|
|
ok: false,
|
|
error: "Invalid file type. Allowed: PNG, JPEG, GIF, WebP",
|
|
};
|
|
|
|
const baseDir = MEDIA_ROOT;
|
|
// eslint-disable-next-line security/detect-non-literal-fs-filename
|
|
await mkdir(baseDir, { recursive: true });
|
|
|
|
const ext = file.name.split(".").pop() ?? "png";
|
|
const name = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}.${ext}`;
|
|
const bytes = await file.arrayBuffer();
|
|
const filePath = resolveMediaPath(name);
|
|
if (!filePath.startsWith(baseDir + path.sep)) throw new Error("Invalid path");
|
|
// eslint-disable-next-line security/detect-non-literal-fs-filename
|
|
await writeFile(filePath, Buffer.from(bytes));
|
|
|
|
revalidatePath("/api/media");
|
|
revalidatePath("/admin/media");
|
|
return { ok: true };
|
|
}
|
|
|
|
export async function deleteMedia(name: string): Promise<void> {
|
|
await requirePermission(PERMS.PAGES_EDIT);
|
|
const { unlink } = await import("node:fs/promises");
|
|
const baseDir = MEDIA_ROOT;
|
|
const filePath = resolveMediaPath(name);
|
|
if (!filePath.startsWith(baseDir + path.sep)) return;
|
|
try {
|
|
await unlink(filePath);
|
|
} catch {
|
|
// File may not exist
|
|
}
|
|
revalidatePath("/api/media");
|
|
revalidatePath("/admin/media");
|
|
}
|
|
|
|
export async function uploadMediaAndReturn(
|
|
formData: FormData,
|
|
): Promise<string> {
|
|
await requirePermission(PERMS.PAGES_EDIT);
|
|
const file = formData.get("file") as File | null;
|
|
if (!file || file.size === 0) return "";
|
|
if (file.size > MAX_SIZE) return "";
|
|
if (!ALLOWED.includes(file.type)) return "";
|
|
|
|
const baseDir = MEDIA_ROOT;
|
|
// eslint-disable-next-line security/detect-non-literal-fs-filename
|
|
await mkdir(baseDir, { recursive: true });
|
|
|
|
const ext = file.name.split(".").pop() ?? "png";
|
|
const name = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}.${ext}`;
|
|
const bytes = await file.arrayBuffer();
|
|
const filePath = resolveMediaPath(name);
|
|
if (!filePath.startsWith(baseDir + path.sep)) return "";
|
|
// eslint-disable-next-line security/detect-non-literal-fs-filename
|
|
await writeFile(filePath, Buffer.from(bytes));
|
|
|
|
revalidatePath("/api/media");
|
|
revalidatePath("/admin/media");
|
|
return `/api/media/${name}`;
|
|
}
|