@balena/pinejs 21.4.0-build-large-file-uploads-2-917f66f4e89b38adb4b0671769e30d678c031448-1 → 21.4.0-build-add-actions-example-c20002c2bf051233b333158f3b7a0719f6cf6e4e-1

package/out/webresource-handler/multipartUpload.js

@@ -1,249 +0,0 @@
-import { randomUUID } from 'node:crypto';
-import { getWebResourceFields } from './index.js';
-import { api } from '../sbvr-api/sbvr-utils.js';
-import { errors, sbvrUtils } from '../server-glue/module.js';
-import { webResource as webResourceEnv } from '../config-loader/env.js';
-import * as permissions from '../sbvr-api/permissions.js';
-export const isMultipartUploadAvailable = (webResourceHandler) => {
-    return (webResourceEnv.multipartUploadEnabled &&
-        webResourceHandler.multipartUpload != null);
-};
-export const multipartUploadHooks = (webResourceHandler) => {
-    return {
-        POSTPARSE: async ({ req, request, tx, api: applicationApi }) => {
-            if (request.odataQuery.property?.resource === 'beginUpload') {
-                const uploadParams = await validateBeginUpload(request, applicationApi, webResourceHandler);
-                tx = await sbvrUtils.db.transaction();
-                req.tx = tx;
-                request.tx = tx;
-                request.method = 'PATCH';
-                request.values = uploadParams;
-                request.odataQuery.resource = request.resourceName;
-                delete request.odataQuery.property;
-                request.custom.isAction = 'beginUpload';
-            }
-            else if (request.odataQuery.property?.resource === 'commitUpload') {
-                const commitPayload = await validateCommitUpload(request, applicationApi);
-                const webresource = await webResourceHandler.multipartUpload.commit({
-                    fileKey: commitPayload.metadata.fileKey,
-                    uploadId: commitPayload.metadata.uploadId,
-                    filename: commitPayload.metadata.filename,
-                    providerCommitData: commitPayload.providerCommitData,
-                });
-                await api.webresource.patch({
-                    resource: 'multipart_upload',
-                    body: {
-                        status: 'completed',
-                    },
-                    options: {
-                        $filter: {
-                            uuid: commitPayload.uuid,
-                        },
-                    },
-                    passthrough: {
-                        tx: tx,
-                        req: permissions.root,
-                    },
-                });
-                request.method = 'PATCH';
-                request.values = {
-                    [commitPayload.metadata.fieldName]: webresource,
-                };
-                request.odataQuery.resource = request.resourceName;
-                delete request.odataQuery.property;
-                request.custom.isAction = 'commitUpload';
-                request.custom.commitUploadPayload = webresource;
-            }
-            else if (request.odataQuery.property?.resource === 'cancelUpload') {
-                const { uuid, fileKey, uploadId } = await validateCancelPayload(request, applicationApi);
-                await webResourceHandler.multipartUpload.cancel({ fileKey, uploadId });
-                await api.webresource.patch({
-                    resource: 'multipart_upload',
-                    body: {
-                        status: 'cancelled',
-                    },
-                    options: {
-                        $filter: { uuid },
-                    },
-                    passthrough: {
-                        tx: tx,
-                        req: permissions.root,
-                    },
-                });
-                request.method = 'GET';
-                request.odataQuery.resource = request.resourceName;
-                delete request.odataQuery.property;
-                request.custom.isAction = 'cancelUpload';
-            }
-        },
-        PRERESPOND: async ({ req, request, response, tx }) => {
-            if (request.custom.isAction === 'beginUpload') {
-                await tx.rollback();
-                response.statusCode = 200;
-                response.body = await beginUpload({
-                    webResourceHandler,
-                    odataRequest: request,
-                    actorId: req.user?.actor,
-                });
-            }
-            else if (request.custom.isAction === 'commitUpload') {
-                response.body = await webResourceHandler.onPreRespond(request.custom.commitUploadPayload);
-            }
-            else if (request.custom.isAction === 'cancelUpload') {
-                response.statusCode = 204;
-                delete response.body;
-            }
-        },
-    };
-};
-const beginUpload = async ({ webResourceHandler, odataRequest, actorId, }) => {
-    const payload = odataRequest.values;
-    const fieldName = Object.keys(payload)[0];
-    const metadata = payload[fieldName];
-    const { fileKey, uploadId, uploadParts } = await webResourceHandler.multipartUpload.begin(fieldName, metadata);
-    const uuid = randomUUID();
-    return await sbvrUtils.db.transaction(async (tx) => {
-        try {
-            await api.webresource.post({
-                resource: 'multipart_upload',
-                body: {
-                    uuid,
-                    resource_name: odataRequest.resourceName,
-                    field_name: fieldName,
-                    resource_id: odataRequest.affectedIds?.[0],
-                    upload_id: uploadId,
-                    file_key: fileKey,
-                    status: 'pending',
-                    filename: metadata.filename,
-                    content_type: metadata.content_type,
-                    size: metadata.size,
-                    chunk_size: metadata.chunk_size,
-                    expiry_date: Date.now() + 7 * 24 * 60 * 60 * 1000,
-                    is_created_by__actor: actorId,
-                },
-                passthrough: {
-                    req: permissions.root,
-                    tx,
-                },
-            });
-            return { [fieldName]: { uuid, uploadParts } };
-        }
-        catch (err) {
-            console.error('failed to start multipart upload', err);
-            throw new errors.BadRequestError('Failed to start multipart upload');
-        }
-    });
-};
-const validateBeginUpload = async (request, applicationApi, webResourceHandler) => {
-    await canAccess(request, applicationApi);
-    const fieldNames = Object.keys(request.values);
-    if (fieldNames.length !== 1) {
-        throw new errors.BadRequestError('You can only get upload url for one field at a time');
-    }
-    const [fieldName] = fieldNames;
-    const webResourceFields = getWebResourceFields(request);
-    if (!webResourceFields.includes(fieldName)) {
-        throw new errors.BadRequestError(`The provided field '${fieldName}' is not a valid webresource`);
-    }
-    const beginUploadPayload = parseBeginUploadPayload(request.values[fieldName], webResourceHandler);
-    if (beginUploadPayload == null) {
-        throw new errors.BadRequestError('Invalid file metadata');
-    }
-    const uploadMetadataCheck = {
-        ...beginUploadPayload,
-        href: 'metadata_check_probe',
-    };
-    return { [fieldName]: uploadMetadataCheck };
-};
-const parseBeginUploadPayload = (payload, webResourceHandler) => {
-    if (payload == null || typeof payload !== 'object') {
-        return null;
-    }
-    let { filename, content_type, size, chunk_size } = payload;
-    if (typeof filename !== 'string' ||
-        typeof content_type !== 'string' ||
-        typeof size !== 'number' ||
-        (chunk_size != null && typeof chunk_size !== 'number') ||
-        (chunk_size != null &&
-            chunk_size < webResourceHandler.multipartUpload.getMinimumPartSize())) {
-        return null;
-    }
-    chunk_size ??= webResourceHandler.multipartUpload.getDefaultPartSize();
-    return { filename, content_type, size, chunk_size };
-};
-const validateCommitUpload = async (request, applicationApi) => {
-    await canAccess(request, applicationApi);
-    const { uuid, providerCommitData } = request.values;
-    if (typeof uuid !== 'string') {
-        throw new errors.BadRequestError('Invalid uuid type');
-    }
-    const [multipartUpload] = await api.webresource.get({
-        resource: 'multipart_upload',
-        options: {
-            $select: ['id', 'file_key', 'upload_id', 'field_name', 'filename'],
-            $filter: {
-                uuid,
-                status: 'pending',
-                expiry_date: { $gt: { $now: {} } },
-            },
-        },
-        passthrough: {
-            tx: request.tx,
-            req: permissions.rootRead,
-        },
-    });
-    if (multipartUpload == null) {
-        throw new errors.BadRequestError(`Invalid upload for uuid ${uuid}`);
-    }
-    const metadata = {
-        fileKey: multipartUpload.file_key,
-        uploadId: multipartUpload.upload_id,
-        filename: multipartUpload.filename,
-        fieldName: multipartUpload.field_name,
-    };
-    return { uuid, providerCommitData, metadata };
-};
-const validateCancelPayload = async (request, applicationApi) => {
-    await canAccess(request, applicationApi);
-    const { uuid } = request.values;
-    if (typeof uuid !== 'string') {
-        throw new errors.BadRequestError('Invalid uuid type');
-    }
-    const [multipartUpload] = await api.webresource.get({
-        resource: 'multipart_upload',
-        options: {
-            $select: ['id', 'file_key', 'upload_id'],
-            $filter: {
-                uuid,
-                status: 'pending',
-                expiry_date: { $gt: { $now: {} } },
-            },
-        },
-        passthrough: {
-            tx: request.tx,
-            req: permissions.rootRead,
-        },
-    });
-    if (multipartUpload == null) {
-        throw new errors.BadRequestError(`Invalid upload for uuid ${uuid}`);
-    }
-    return {
-        uuid,
-        fileKey: multipartUpload.file_key,
-        uploadId: multipartUpload.upload_id,
-    };
-};
-const canAccess = async (request, applicationApi) => {
-    if (request.odataQuery.key == null) {
-        throw new errors.BadRequestError();
-    }
-    const canAccessUrl = request.url
-        .slice(1)
-        .replace(/(beginUpload|commitUpload|cancelUpload)$/, 'canAccess');
-    await applicationApi.request({
-        method: 'POST',
-        url: canAccessUrl,
-        body: { method: 'PATCH' },
-    });
-};
-//# sourceMappingURL=multipartUpload.js.map

package/out/webresource-handler/multipartUpload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"multipartUpload.js","sourceRoot":"","sources":["../../src/webresource-handler/multipartUpload.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,OAAO,EAAE,GAAG,EAAE,MAAM,2BAA2B,CAAC;AAEhD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,WAAW,IAAI,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,KAAK,WAAW,MAAM,4BAA4B,CAAC;AAe1D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACzC,kBAAsC,EACS,EAAE;IACjD,OAAO,CACN,cAAc,CAAC,sBAAsB;QACrC,kBAAkB,CAAC,eAAe,IAAI,IAAI,CAC1C,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CACnC,kBAA0C,EACxB,EAAE;IACpB,OAAO;QACN,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE;YAC9D,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,KAAK,aAAa,EAAE,CAAC;gBAC7D,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAC7C,OAAO,EACP,cAAc,EACd,kBAAkB,CAClB,CAAC;gBAOF,EAAE,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;gBACtC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;gBACZ,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;gBAEhB,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;gBACzB,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC;gBAC9B,OAAO,CAAC,UAAU,CAAC,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC;gBACnD,OAAO,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACnC,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,aAAa,CAAC;YACzC,CAAC;iBAAM,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACrE,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAC/C,OAAO,EACP,cAAc,CACd,CAAC;gBAEF,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,eAAe,CAAC,MAAM,CAAC;oBACnE,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,OAAO;oBACvC,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC,QAAQ;oBACzC,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC,QAAQ;oBACzC,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;iBACpD,CAAC,CAAC;gBAEH,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC;oBAC3B,QAAQ,EAAE,kBAAkB;oBAC5B,IAAI,EAAE;wBACL,MAAM,EAAE,WAAW;qBACnB;oBACD,OAAO,EAAE;wBACR,OAAO,EAAE;4BACR,IAAI,EAAE,aAAa,CAAC,IAAI;yBACxB;qBACD;oBACD,WAAW,EAAE;wBACZ,EAAE,EAAE,EAAE;wBACN,GAAG,EAAE,WAAW,CAAC,IAAI;qBACrB;iBACD,CAAC,CAAC;gBAEH,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;gBACzB,OAAO,CAAC,MAAM,GAAG;oBAChB,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW;iBAC/C,CAAC;gBACF,OAAO,CAAC,UAAU,CAAC,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC;gBACnD,OAAO,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACnC,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAC;gBACzC,OAAO,CAAC,MAAM,CAAC,mBAAmB,GAAG,WAAW,CAAC;YAClD,CAAC;iBAAM,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACrE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,qBAAqB,CAC9D,OAAO,EACP,cAAc,CACd,CAAC;gBAEF,MAAM,kBAAkB,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAEvE,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC;oBAC3B,QAAQ,EAAE,kBAAkB;oBAC5B,IAAI,EAAE;wBACL,MAAM,EAAE,WAAW;qBACnB;oBACD,OAAO,EAAE;wBACR,OAAO,EAAE,EAAE,IAAI,EAAE;qBACjB;oBACD,WAAW,EAAE;wBACZ,EAAE,EAAE,EAAE;wBACN,GAAG,EAAE,WAAW,CAAC,IAAI;qBACrB;iBACD,CAAC,CAAC;gBAEH,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC;gBACvB,OAAO,CAAC,UAAU,CAAC,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC;gBACnD,OAAO,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACnC,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAC;YAC1C,CAAC;QACF,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;YACpD,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;gBAK/C,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;gBAEpB,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;gBAC1B,QAAQ,CAAC,IAAI,GAAG,MAAM,WAAW,CAAC;oBACjC,kBAAkB;oBAClB,YAAY,EAAE,OAAO;oBACrB,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK;iBACxB,CAAC,CAAC;YACJ,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACvD,QAAQ,CAAC,IAAI,GAAG,MAAM,kBAAkB,CAAC,YAAY,CACpD,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAClC,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACvD,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;gBAC1B,OAAO,QAAQ,CAAC,IAAI,CAAC;YACtB,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,KAAK,EAAE,EAC1B,kBAAkB,EAClB,YAAY,EACZ,OAAO,GAKP,EAAgC,EAAE;IAClC,MAAM,OAAO,GAAG,YAAY,CAAC,MAE5B,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,GACvC,MAAM,kBAAkB,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAE1B,OAAO,MAAM,SAAS,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QAClD,IAAI,CAAC;YACJ,MAAM,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC;gBAC1B,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE;oBACL,IAAI;oBACJ,aAAa,EAAE,YAAY,CAAC,YAAY;oBACxC,UAAU,EAAE,SAAS;oBACrB,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;oBAC1C,SAAS,EAAE,QAAQ;oBACnB,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;oBACnC,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;oBACjD,oBAAoB,EAAE,OAAO;iBAC7B;gBACD,WAAW,EAAE;oBACZ,GAAG,EAAE,WAAW,CAAC,IAAI;oBACrB,EAAE;iBACF;aACD,CAAC,CAAC;YACH,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;YACvD,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,KAAK,EAChC,OAAqB,EACrB,cAA4B,EAC5B,kBAA0C,EACzC,EAAE;IACH,MAAM,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,MAAM,CAAC,eAAe,CAC/B,qDAAqD,CACrD,CAAC;IACH,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC;IAC/B,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,MAAM,CAAC,eAAe,CAC/B,uBAAuB,SAAS,8BAA8B,CAC9D,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,uBAAuB,CACjD,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EACzB,kBAAkB,CAClB,CAAC;IACF,IAAI,kBAAkB,IAAI,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,mBAAmB,GAAuB;QAC/C,GAAG,kBAAkB;QAGrB,IAAI,EAAE,sBAAsB;KAC5B,CAAC;IAEF,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,mBAAmB,EAAE,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAC/B,OAAkB,EAClB,kBAA0C,EACL,EAAE;IACvC,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC3D,IACC,OAAO,QAAQ,KAAK,QAAQ;QAC5B,OAAO,YAAY,KAAK,QAAQ;QAChC,OAAO,IAAI,KAAK,QAAQ;QACxB,CAAC,UAAU,IAAI,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,CAAC;QACtD,CAAC,UAAU,IAAI,IAAI;YAClB,UAAU,GAAG,kBAAkB,CAAC,eAAe,CAAC,kBAAkB,EAAE,CAAC,EACrE,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,UAAU,KAAK,kBAAkB,CAAC,eAAe,CAAC,kBAAkB,EAAE,CAAC;IAEvE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,KAAK,EACjC,OAAqB,EACrB,cAA4B,EAC3B,EAAE;IACH,MAAM,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAEzC,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC;QACnD,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE;YACR,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,CAAC;YAClE,OAAO,EAAE;gBACR,IAAI;gBACJ,MAAM,EAAE,SAAS;gBACjB,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;aAClC;SACD;QACD,WAAW,EAAE;YACZ,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,GAAG,EAAE,WAAW,CAAC,QAAQ;SACzB;KACD,CAAC,CAAC;IAEH,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,QAAQ,GAAG;QAChB,OAAO,EAAE,eAAe,CAAC,QAAQ;QACjC,QAAQ,EAAE,eAAe,CAAC,SAAS;QACnC,QAAQ,EAAE,eAAe,CAAC,QAAQ;QAClC,SAAS,EAAE,eAAe,CAAC,UAAU;KACrC,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,KAAK,EAClC,OAAqB,EACrB,cAA4B,EAC3B,EAAE;IACH,MAAM,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAEzC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAChC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC;QACnD,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE;YACR,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC;YACxC,OAAO,EAAE;gBACR,IAAI;gBACJ,MAAM,EAAE,SAAS;gBACjB,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;aAClC;SACD;QACD,WAAW,EAAE;YACZ,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,GAAG,EAAE,WAAW,CAAC,QAAQ;SACzB;KACD,CAAC,CAAC;IAEH,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,OAAO;QACN,IAAI;QACJ,OAAO,EAAE,eAAe,CAAC,QAAQ;QACjC,QAAQ,EAAE,eAAe,CAAC,SAAS;KACnC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,KAAK,EACtB,OAAqB,EACrB,cAA4B,EAC3B,EAAE;IACH,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG;SAC9B,KAAK,CAAC,CAAC,CAAC;SACR,OAAO,CAAC,0CAA0C,EAAE,WAAW,CAAC,CAAC;IAEnE,MAAM,cAAc,CAAC,OAAO,CAAC;QAC5B,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,YAAY;QACjB,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;KACzB,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/src/webresource-handler/multipartUpload.ts

@@ -1,367 +0,0 @@
-import type { WebResourceType as WebResource } from '@balena/sbvr-types';
-import { randomUUID } from 'node:crypto';
-import type { AnyObject } from 'pinejs-client-core';
-import type {
-	BeginMultipartUploadPayload,
-	UploadPart,
-	WebResourceHandler,
-} from './index.js';
-import { getWebResourceFields } from './index.js';
-import type { PinejsClient } from '../sbvr-api/sbvr-utils.js';
-import { api } from '../sbvr-api/sbvr-utils.js';
-import type { ODataRequest } from '../sbvr-api/uri-parser.js';
-import { errors, sbvrUtils } from '../server-glue/module.js';
-import { webResource as webResourceEnv } from '../config-loader/env.js';
-import * as permissions from '../sbvr-api/permissions.js';
-
-type BeginUploadDbCheck = BeginMultipartUploadPayload & WebResource;
-
-export interface BeginUploadResponse {
-	[fieldName: string]: {
-		uuid: string;
-		uploadParts: UploadPart[];
-	};
-}
-
-// Is WebResourceHandler but with beginMultipartUpload and commitMultipartUpload as not optional
-type MultipartUploadHandler = WebResourceHandler &
-	Required<Pick<WebResourceHandler, 'multipartUpload'>>;
-
-export const isMultipartUploadAvailable = (
-	webResourceHandler: WebResourceHandler,
-): webResourceHandler is MultipartUploadHandler => {
-	return (
-		webResourceEnv.multipartUploadEnabled &&
-		webResourceHandler.multipartUpload != null
-	);
-};
-
-export const multipartUploadHooks = (
-	webResourceHandler: MultipartUploadHandler,
-): sbvrUtils.Hooks => {
-	return {
-		POSTPARSE: async ({ req, request, tx, api: applicationApi }) => {
-			if (request.odataQuery.property?.resource === 'beginUpload') {
-				const uploadParams = await validateBeginUpload(
-					request,
-					applicationApi,
-					webResourceHandler,
-				);
-
-				// This transaction is necessary because beginUpload requests
-				// will rollback the transaction (in order to first validate)
-				// The metadata requested. If we don't pass any transaction
-				// It will use the default transaction handler which will error out
-				// on any rollback.
-				tx = await sbvrUtils.db.transaction();
-				req.tx = tx;
-				request.tx = tx;
-
-				request.method = 'PATCH';
-				request.values = uploadParams;
-				request.odataQuery.resource = request.resourceName;
-				delete request.odataQuery.property;
-				request.custom.isAction = 'beginUpload';
-			} else if (request.odataQuery.property?.resource === 'commitUpload') {
-				const commitPayload = await validateCommitUpload(
-					request,
-					applicationApi,
-				);
-
-				const webresource = await webResourceHandler.multipartUpload.commit({
-					fileKey: commitPayload.metadata.fileKey,
-					uploadId: commitPayload.metadata.uploadId,
-					filename: commitPayload.metadata.filename,
-					providerCommitData: commitPayload.providerCommitData,
-				});
-
-				await api.webresource.patch({
-					resource: 'multipart_upload',
-					body: {
-						status: 'completed',
-					},
-					options: {
-						$filter: {
-							uuid: commitPayload.uuid,
-						},
-					},
-					passthrough: {
-						tx: tx,
-						req: permissions.root,
-					},
-				});
-
-				request.method = 'PATCH';
-				request.values = {
-					[commitPayload.metadata.fieldName]: webresource,
-				};
-				request.odataQuery.resource = request.resourceName;
-				delete request.odataQuery.property;
-				request.custom.isAction = 'commitUpload';
-				request.custom.commitUploadPayload = webresource;
-			} else if (request.odataQuery.property?.resource === 'cancelUpload') {
-				const { uuid, fileKey, uploadId } = await validateCancelPayload(
-					request,
-					applicationApi,
-				);
-
-				await webResourceHandler.multipartUpload.cancel({ fileKey, uploadId });
-
-				await api.webresource.patch({
-					resource: 'multipart_upload',
-					body: {
-						status: 'cancelled',
-					},
-					options: {
-						$filter: { uuid },
-					},
-					passthrough: {
-						tx: tx,
-						req: permissions.root,
-					},
-				});
-
-				request.method = 'GET';
-				request.odataQuery.resource = request.resourceName;
-				delete request.odataQuery.property;
-				request.custom.isAction = 'cancelUpload';
-			}
-		},
-		PRERESPOND: async ({ req, request, response, tx }) => {
-			if (request.custom.isAction === 'beginUpload') {
-				// In the case where the transaction has failed because it had invalid payload
-				// such as breaking a db constraint, this hook wouldn't have been called
-				// and would rather throw with the rule it failed to validate
-				// We rollback here as the patch was just a way to validate the upload payload
-				await tx.rollback();
-
-				response.statusCode = 200;
-				response.body = await beginUpload({
-					webResourceHandler,
-					odataRequest: request,
-					actorId: req.user?.actor,
-				});
-			} else if (request.custom.isAction === 'commitUpload') {
-				response.body = await webResourceHandler.onPreRespond(
-					request.custom.commitUploadPayload,
-				);
-			} else if (request.custom.isAction === 'cancelUpload') {
-				response.statusCode = 204;
-				delete response.body;
-			}
-		},
-	};
-};
-
-const beginUpload = async ({
-	webResourceHandler,
-	odataRequest,
-	actorId,
-}: {
-	webResourceHandler: MultipartUploadHandler;
-	odataRequest: ODataRequest;
-	actorId?: number;
-}): Promise<BeginUploadResponse> => {
-	const payload = odataRequest.values as {
-		[x: string]: BeginMultipartUploadPayload;
-	};
-	const fieldName = Object.keys(payload)[0];
-	const metadata = payload[fieldName];
-	const { fileKey, uploadId, uploadParts } =
-		await webResourceHandler.multipartUpload.begin(fieldName, metadata);
-	const uuid = randomUUID();
-
-	return await sbvrUtils.db.transaction(async (tx) => {
-		try {
-			await api.webresource.post({
-				resource: 'multipart_upload',
-				body: {
-					uuid,
-					resource_name: odataRequest.resourceName,
-					field_name: fieldName,
-					resource_id: odataRequest.affectedIds?.[0],
-					upload_id: uploadId,
-					file_key: fileKey,
-					status: 'pending',
-					filename: metadata.filename,
-					content_type: metadata.content_type,
-					size: metadata.size,
-					chunk_size: metadata.chunk_size,
-					expiry_date: Date.now() + 7 * 24 * 60 * 60 * 1000, // 7 days in ms
-					is_created_by__actor: actorId,
-				},
-				passthrough: {
-					req: permissions.root,
-					tx,
-				},
-			});
-			return { [fieldName]: { uuid, uploadParts } };
-		} catch (err) {
-			console.error('failed to start multipart upload', err);
-			throw new errors.BadRequestError('Failed to start multipart upload');
-		}
-	});
-};
-
-const validateBeginUpload = async (
-	request: ODataRequest,
-	applicationApi: PinejsClient,
-	webResourceHandler: MultipartUploadHandler,
-) => {
-	await canAccess(request, applicationApi);
-
-	const fieldNames = Object.keys(request.values);
-	if (fieldNames.length !== 1) {
-		throw new errors.BadRequestError(
-			'You can only get upload url for one field at a time',
-		);
-	}
-
-	const [fieldName] = fieldNames;
-	const webResourceFields = getWebResourceFields(request);
-	if (!webResourceFields.includes(fieldName)) {
-		throw new errors.BadRequestError(
-			`The provided field '${fieldName}' is not a valid webresource`,
-		);
-	}
-
-	const beginUploadPayload = parseBeginUploadPayload(
-		request.values[fieldName],
-		webResourceHandler,
-	);
-	if (beginUploadPayload == null) {
-		throw new errors.BadRequestError('Invalid file metadata');
-	}
-
-	const uploadMetadataCheck: BeginUploadDbCheck = {
-		...beginUploadPayload,
-		// This is "probe" request. We don't actually store anything on the application table yet
-		// We just avoid creating the application record if it would fail anyway for some other db constraint
-		href: 'metadata_check_probe',
-	};
-
-	return { [fieldName]: uploadMetadataCheck };
-};
-
-const parseBeginUploadPayload = (
-	payload: AnyObject,
-	webResourceHandler: MultipartUploadHandler,
-): BeginMultipartUploadPayload | null => {
-	if (payload == null || typeof payload !== 'object') {
-		return null;
-	}
-
-	let { filename, content_type, size, chunk_size } = payload;
-	if (
-		typeof filename !== 'string' ||
-		typeof content_type !== 'string' ||
-		typeof size !== 'number' ||
-		(chunk_size != null && typeof chunk_size !== 'number') ||
-		(chunk_size != null &&
-			chunk_size < webResourceHandler.multipartUpload.getMinimumPartSize())
-	) {
-		return null;
-	}
-
-	chunk_size ??= webResourceHandler.multipartUpload.getDefaultPartSize();
-
-	return { filename, content_type, size, chunk_size };
-};
-
-const validateCommitUpload = async (
-	request: ODataRequest,
-	applicationApi: PinejsClient,
-) => {
-	await canAccess(request, applicationApi);
-
-	const { uuid, providerCommitData } = request.values;
-	if (typeof uuid !== 'string') {
-		throw new errors.BadRequestError('Invalid uuid type');
-	}
-
-	const [multipartUpload] = await api.webresource.get({
-		resource: 'multipart_upload',
-		options: {
-			$select: ['id', 'file_key', 'upload_id', 'field_name', 'filename'],
-			$filter: {
-				uuid,
-				status: 'pending',
-				expiry_date: { $gt: { $now: {} } },
-			},
-		},
-		passthrough: {
-			tx: request.tx,
-			req: permissions.rootRead,
-		},
-	});
-
-	if (multipartUpload == null) {
-		throw new errors.BadRequestError(`Invalid upload for uuid ${uuid}`);
-	}
-
-	const metadata = {
-		fileKey: multipartUpload.file_key,
-		uploadId: multipartUpload.upload_id,
-		filename: multipartUpload.filename,
-		fieldName: multipartUpload.field_name,
-	};
-
-	return { uuid, providerCommitData, metadata };
-};
-
-const validateCancelPayload = async (
-	request: ODataRequest,
-	applicationApi: PinejsClient,
-) => {
-	await canAccess(request, applicationApi);
-
-	const { uuid } = request.values;
-	if (typeof uuid !== 'string') {
-		throw new errors.BadRequestError('Invalid uuid type');
-	}
-
-	const [multipartUpload] = await api.webresource.get({
-		resource: 'multipart_upload',
-		options: {
-			$select: ['id', 'file_key', 'upload_id'],
-			$filter: {
-				uuid,
-				status: 'pending',
-				expiry_date: { $gt: { $now: {} } },
-			},
-		},
-		passthrough: {
-			tx: request.tx,
-			req: permissions.rootRead,
-		},
-	});
-
-	if (multipartUpload == null) {
-		throw new errors.BadRequestError(`Invalid upload for uuid ${uuid}`);
-	}
-
-	return {
-		uuid,
-		fileKey: multipartUpload.file_key,
-		uploadId: multipartUpload.upload_id,
-	};
-};
-
-const canAccess = async (
-	request: ODataRequest,
-	applicationApi: PinejsClient,
-) => {
-	if (request.odataQuery.key == null) {
-		throw new errors.BadRequestError();
-	}
-
-	const canAccessUrl = request.url
-		.slice(1)
-		.replace(/(beginUpload|commitUpload|cancelUpload)$/, 'canAccess');
-
-	await applicationApi.request({
-		method: 'POST',
-		url: canAccessUrl,
-		body: { method: 'PATCH' },
-	});
-};