57 lines
2.0 KiB
TypeScript
57 lines
2.0 KiB
TypeScript
export const prerender = false;
|
|
|
|
import type { APIRoute } from 'astro';
|
|
import { writeFile, mkdir } from 'node:fs/promises';
|
|
import { join, extname, basename } from 'node:path';
|
|
|
|
const UPLOAD_ROOT = join(process.cwd(), 'data', 'uploads');
|
|
|
|
const IMAGE_EXT = new Set(['.png', '.jpg', '.jpeg', '.webp', '.svg', '.gif']);
|
|
const DOCUMENT_EXT = new Set(['.pdf']);
|
|
|
|
const MAX_SIZE: Record<'image' | 'document', number> = {
|
|
image: 5 * 1024 * 1024,
|
|
document: 8 * 1024 * 1024,
|
|
};
|
|
|
|
function sanitize(filename: string): string {
|
|
const name = basename(filename).replace(/[^a-zA-Z0-9._-]/g, '_');
|
|
return name.slice(-120);
|
|
}
|
|
|
|
export const POST: APIRoute = async ({ request }) => {
|
|
const form = await request.formData();
|
|
const file = form.get('file');
|
|
const folder = (form.get('folder') as string | null) ?? '';
|
|
const kindRaw = (form.get('kind') as string | null) ?? 'image';
|
|
const kind: 'image' | 'document' = kindRaw === 'document' ? 'document' : 'image';
|
|
|
|
if (!(file instanceof File)) {
|
|
return new Response(JSON.stringify({ error: 'no_file' }), { status: 400 });
|
|
}
|
|
|
|
const ext = extname(file.name).toLowerCase();
|
|
const allowed = kind === 'document' ? DOCUMENT_EXT : IMAGE_EXT;
|
|
if (!allowed.has(ext)) {
|
|
return new Response(JSON.stringify({ error: 'invalid_extension' }), { status: 400 });
|
|
}
|
|
|
|
if (file.size > MAX_SIZE[kind]) {
|
|
return new Response(JSON.stringify({ error: 'file_too_large' }), { status: 400 });
|
|
}
|
|
|
|
const safeFolder = folder.replace(/[^a-zA-Z0-9_-]/g, '');
|
|
const bucket = kind === 'document' ? 'assets' : 'img';
|
|
const targetDir = safeFolder ? join(UPLOAD_ROOT, bucket, safeFolder) : join(UPLOAD_ROOT, bucket);
|
|
await mkdir(targetDir, { recursive: true });
|
|
|
|
const filename = sanitize(file.name);
|
|
const buffer = Buffer.from(await file.arrayBuffer());
|
|
await writeFile(join(targetDir, filename), buffer);
|
|
|
|
const url = `/api/files/${bucket}/${safeFolder ? safeFolder + '/' : ''}${filename}`;
|
|
return new Response(JSON.stringify({ ok: true, url }), {
|
|
headers: { 'Content-Type': 'application/json' },
|
|
});
|
|
};
|