@muhgholy/next-drive 4.13.0 → 4.15.0

package/dist/{chunk-MUA7R3H5.cjs → chunk-2DGLSDQ7.cjs}

@@ -4,7 +4,7 @@ var formidable = require('formidable');
 var path = require('path');
 var fs = require('fs');
 var os3 = require('os');
-var crypto2 = require('crypto');
+var crypto3 = require('crypto');
 var mongoose = require('mongoose');
 var sharp2 = require('sharp');
 var zod = require('zod');
@@ -17,7 +17,7 @@ var formidable__default = /*#__PURE__*/_interopDefault(formidable);
 var path__default = /*#__PURE__*/_interopDefault(path);
 var fs__default = /*#__PURE__*/_interopDefault(fs);
 var os3__default = /*#__PURE__*/_interopDefault(os3);
-var crypto2__default = /*#__PURE__*/_interopDefault(crypto2);
+var crypto3__default = /*#__PURE__*/_interopDefault(crypto3);
 var mongoose__default = /*#__PURE__*/_interopDefault(mongoose);
 var sharp2__default = /*#__PURE__*/_interopDefault(sharp2);
 var ffmpeg__default = /*#__PURE__*/_interopDefault(ffmpeg);
@@ -364,7 +364,7 @@ var validateMimeType = (mime, allowedTypes) => {
   });
 };
 var computeFileHash = (filePath) => new Promise((resolve, reject) => {
-  const hash = crypto2__default.default.createHash("sha256");
+  const hash = crypto3__default.default.createHash("sha256");
   const stream = fs__default.default.createReadStream(filePath);
   stream.on("data", (data) => hash.update(data));
   stream.on("end", () => resolve(hash.digest("hex")));
@@ -1286,7 +1286,7 @@ var driveGetUrl = (fileId, options) => {
   } else {
     expiryTimestamp = Math.floor(Date.now() / 1e3) + expiresIn;
   }
-  const signature = crypto2__default.default.createHmac("sha256", secret).update(`${fileId}:${expiryTimestamp}`).digest("hex");
+  const signature = crypto3__default.default.createHmac("sha256", secret).update(`${fileId}:${expiryTimestamp}`).digest("hex");
   const token = Buffer.from(`${expiryTimestamp}:${signature}`).toString("base64url");
   return `/api/drive?action=serve&id=${fileId}&token=${token}`;
 };
@@ -1552,7 +1552,7 @@ var driveUpload = async (source, key, options) => {
     if (!fs__default.default.existsSync(tempDir)) {
       fs__default.default.mkdirSync(tempDir, { recursive: true });
     }
-    tempFilePath = path__default.default.join(tempDir, `upload-${crypto2__default.default.randomUUID()}.tmp`);
+    tempFilePath = path__default.default.join(tempDir, `upload-${crypto3__default.default.randomUUID()}.tmp`);
     fs__default.default.writeFileSync(tempFilePath, source);
     sourceFilePath = tempFilePath;
     fileSize = source.length;
@@ -1561,7 +1561,7 @@ var driveUpload = async (source, key, options) => {
     if (!fs__default.default.existsSync(tempDir)) {
       fs__default.default.mkdirSync(tempDir, { recursive: true });
     }
-    tempFilePath = path__default.default.join(tempDir, `upload-${crypto2__default.default.randomUUID()}.tmp`);
+    tempFilePath = path__default.default.join(tempDir, `upload-${crypto3__default.default.randomUUID()}.tmp`);
     const writeStream = fs__default.default.createWriteStream(tempFilePath);
     await new Promise((resolve, reject) => {
       source.pipe(writeStream);
@@ -1750,7 +1750,7 @@ var driveAPIHandler = async (req, res) => {
             return res.status(401).json({ status: 401, message: "Token expired" });
           }
           const { secret } = config.security.signedUrls;
-          const expectedSignature = crypto2__default.default.createHmac("sha256", secret).update(`${id}:${expiry}`).digest("hex");
+          const expectedSignature = crypto3__default.default.createHmac("sha256", secret).update(`${id}:${expiry}`).digest("hex");
           if (signature !== expectedSignature) {
             return res.status(401).json({ status: 401, message: "Invalid token" });
           }
@@ -2024,7 +2024,15 @@ var driveAPIHandler = async (req, res) => {
         }
         if (afterId) query._id = { $lt: afterId };
         const items = await drive_default.find(query, {}, { sort: { order: 1, _id: -1 }, limit });
-        const plainItems = await Promise.all(items.map((item) => item.toClient()));
+        let plainItems = await Promise.all(items.map((item) => item.toClient()));
+        if (config.security?.signedUrls?.enabled) {
+          const { secret, expiresIn } = config.security.signedUrls;
+          plainItems = plainItems.map((item) => {
+            const expiryTimestamp = Math.floor(Date.now() / 1e3) + expiresIn;
+            const signature = crypto3__default.default.createHmac("sha256", secret).update(`${item.id}:${expiryTimestamp}`).digest("hex");
+            return { ...item, token: Buffer.from(`${expiryTimestamp}:${signature}`).toString("base64url") };
+          });
+        }
         res.status(200).json({ status: 200, message: "Items retrieved", data: { items: plainItems, hasMore: items.length === limit } });
         return;
       }
@@ -2051,7 +2059,15 @@ var driveAPIHandler = async (req, res) => {
         }
         if (folderId && folderId !== "root") query.parentId = folderId;
         const items = await drive_default.find(query, {}, { limit, sort: { createdAt: -1 } });
-        const plainItems = await Promise.all(items.map((i) => i.toClient()));
+        let plainItems = await Promise.all(items.map((i) => i.toClient()));
+        if (config.security?.signedUrls?.enabled) {
+          const { secret, expiresIn } = config.security.signedUrls;
+          plainItems = plainItems.map((item) => {
+            const expiryTimestamp = Math.floor(Date.now() / 1e3) + expiresIn;
+            const signature = crypto3__default.default.createHmac("sha256", secret).update(`${item.id}:${expiryTimestamp}`).digest("hex");
+            return { ...item, token: Buffer.from(`${expiryTimestamp}:${signature}`).toString("base64url") };
+          });
+        }
         return res.status(200).json({ status: 200, message: "Results", data: { items: plainItems } });
       }
       // ** 3. UPLOAD **
@@ -2109,7 +2125,7 @@ var driveAPIHandler = async (req, res) => {
               return res.status(413).json({ status: 413, message: "Storage quota exceeded" });
             }
           }
-          currentUploadId = crypto2__default.default.randomUUID();
+          currentUploadId = crypto3__default.default.randomUUID();
           const uploadDir = path__default.default.join(tempBaseDir, currentUploadId);
           fs__default.default.mkdirSync(uploadDir, { recursive: true });
           const metadata = {
@@ -2311,7 +2327,15 @@ var driveAPIHandler = async (req, res) => {
           trashedAt: { $ne: null }
         };
         const items = await drive_default.find(query, {}, { sort: { trashedAt: -1 } });
-        const plainItems = await Promise.all(items.map((item) => item.toClient()));
+        let plainItems = await Promise.all(items.map((item) => item.toClient()));
+        if (config.security?.signedUrls?.enabled) {
+          const { secret, expiresIn } = config.security.signedUrls;
+          plainItems = plainItems.map((item) => {
+            const expiryTimestamp = Math.floor(Date.now() / 1e3) + expiresIn;
+            const signature = crypto3__default.default.createHmac("sha256", secret).update(`${item.id}:${expiryTimestamp}`).digest("hex");
+            return { ...item, token: Buffer.from(`${expiryTimestamp}:${signature}`).toString("base64url") };
+          });
+        }
         return res.status(200).json({
           status: 200,
           message: "Trash items",
@@ -2398,5 +2422,5 @@ exports.driveReadFile = driveReadFile;
 exports.driveUpload = driveUpload;
 exports.getDriveConfig = getDriveConfig;
 exports.getDriveInformation = getDriveInformation;
-//# sourceMappingURL=chunk-MUA7R3H5.cjs.map
-//# sourceMappingURL=chunk-MUA7R3H5.cjs.map
+//# sourceMappingURL=chunk-2DGLSDQ7.cjs.map
+//# sourceMappingURL=chunk-2DGLSDQ7.cjs.map