@devstroupe/devkit-nest 1.1.13 → 1.1.15

package/dist/storage/drivers/local.storage.d.ts

@@ -1,5 +1,5 @@
 import { StorageService } from '../storage.service';
-import { StorageFile, UploadOptions, UploadResult, LocalStorageOptions } from '../storage.types';
+import { StorageFile, UploadOptions, UploadResult, LocalStorageOptions, StorageDownloadResult } from '../storage.types';
 export declare class LocalStorageService implements StorageService {
     private readonly storagePath;
     private readonly baseUrl;
@@ -8,4 +8,5 @@ export declare class LocalStorageService implements StorageService {
     delete(key: string): Promise<void>;
     getUrl(key: string): Promise<string>;
     getSignedUrl(key: string, expiresIn?: number): Promise<string>;
+    download(key: string): Promise<StorageDownloadResult>;
 }

package/dist/storage/drivers/local.storage.js

@@ -106,6 +106,24 @@ let LocalStorageService = class LocalStorageService {
     async getSignedUrl(key, expiresIn) {
         return this.getUrl(key);
     }
+    async download(key) {
+        const targetFile = path.resolve(this.storagePath, key);
+        const rootPrefix = this.storagePath.endsWith(path.sep) ? this.storagePath : this.storagePath + path.sep;
+        // Mitigação Directory Traversal
+        if (!targetFile.startsWith(rootPrefix)) {
+            throw new Error('Directory traversal attempt detected');
+        }
+        try {
+            await fs.stat(targetFile);
+        }
+        catch {
+            throw new Error('File not found');
+        }
+        return {
+            type: 'file',
+            filePath: targetFile,
+        };
+    }
 };
 exports.LocalStorageService = LocalStorageService;
 exports.LocalStorageService = LocalStorageService = __decorate([

package/dist/storage/drivers/local.storage.test.js

@@ -103,4 +103,28 @@ const local_storage_1 = require("./local.storage");
             await service.delete('../../../etc/passwd');
         }, /Directory traversal attempt detected/);
     });
+    (0, node_test_1.test)('deve realizar download de arquivo com sucesso', async () => {
+        const file = {
+            originalname: 'download-test.txt',
+            mimetype: 'text/plain',
+            buffer: Buffer.from('download content'),
+            size: 16,
+        };
+        const uploadResult = await service.upload(file);
+        const downloadResult = await service.download(uploadResult.key);
+        assert.strictEqual(downloadResult.type, 'file');
+        assert.ok(downloadResult.filePath);
+        const content = await fs.readFile(downloadResult.filePath);
+        assert.strictEqual(content.toString(), 'download content');
+    });
+    (0, node_test_1.test)('deve rejeitar download com Directory Traversal em key', async () => {
+        await assert.rejects(async () => {
+            await service.download('../../../etc/passwd');
+        }, /Directory traversal attempt detected/);
+    });
+    (0, node_test_1.test)('deve lançar erro ao tentar baixar arquivo inexistente', async () => {
+        await assert.rejects(async () => {
+            await service.download('non-existent-file.txt');
+        }, /File not found/);
+    });
 });

package/dist/storage/drivers/s3.storage.d.ts

@@ -1,5 +1,5 @@
 import { StorageService } from '../storage.service';
-import { StorageFile, UploadOptions, UploadResult, S3StorageOptions, R2StorageOptions } from '../storage.types';
+import { StorageFile, UploadOptions, UploadResult, S3StorageOptions, R2StorageOptions, StorageDownloadResult } from '../storage.types';
 export declare class S3StorageService implements StorageService {
     private readonly client;
     private readonly bucket;
@@ -9,4 +9,5 @@ export declare class S3StorageService implements StorageService {
     delete(key: string): Promise<void>;
     getUrl(key: string): Promise<string>;
     getSignedUrl(key: string, expiresIn?: number): Promise<string>;
+    download(key: string): Promise<StorageDownloadResult>;
 }

package/dist/storage/drivers/s3.storage.js

@@ -130,6 +130,13 @@ let S3StorageService = class S3StorageService {
         });
         return (0, s3_request_presigner_1.getSignedUrl)(this.client, command, { expiresIn });
     }
+    async download(key) {
+        const url = await this.getSignedUrl(key, 300);
+        return {
+            type: 'redirect',
+            url,
+        };
+    }
 };
 exports.S3StorageService = S3StorageService;
 exports.S3StorageService = S3StorageService = __decorate([

package/dist/storage/storage.service.d.ts

@@ -1,7 +1,8 @@
-import { StorageFile, UploadOptions, UploadResult } from './storage.types';
+import { StorageFile, UploadOptions, UploadResult, StorageDownloadResult } from './storage.types';
 export declare abstract class StorageService {
     abstract upload(file: StorageFile, options?: UploadOptions): Promise<UploadResult>;
     abstract delete(key: string): Promise<void>;
     abstract getUrl(key: string): Promise<string>;
     abstract getSignedUrl(key: string, expiresIn?: number): Promise<string>;
+    abstract download(key: string): Promise<StorageDownloadResult>;
 }

package/dist/storage/storage.types.d.ts

@@ -40,3 +40,8 @@ export interface UploadResult {
     size: number;
     mimetype: string;
 }
+export interface StorageDownloadResult {
+    type: 'file' | 'redirect';
+    filePath?: string;
+    url?: string;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devstroupe/devkit-nest",
-  "version": "1.1.13",
+  "version": "1.1.15",
   "description": "DevsTroupe Development Kit — NestJS base classes: BaseRepository, BaseCrudController and query parsers",
   "license": "MIT",
   "keywords": [
@@ -32,7 +32,7 @@
     "@aws-sdk/client-s3": "^3.500.0",
     "@aws-sdk/s3-request-presigner": "^3.500.0",
     "jsonwebtoken": "^9.0.2",
-    "@devstroupe/devkit-core": "1.1.13"
+    "@devstroupe/devkit-core": "1.1.15"
   },
   "peerDependencies": {
     "@nestjs/common": "^10.0.0 || ^11.0.0",