@muhgholy/next-drive 4.15.1 → 4.17.0

package/dist/{chunk-SSOIUMFQ.js → chunk-N3C7IKRK.js}

@@ -2,7 +2,7 @@ import formidable from 'formidable';
 import path from 'path';
 import fs from 'fs';
 import os3 from 'os';
-import crypto3 from 'crypto';
+import crypto2 from 'crypto';
 import mongoose, { Schema, isValidObjectId } from 'mongoose';
 import sharp2 from 'sharp';
 import { z } from 'zod';
@@ -238,38 +238,49 @@ var runMigrations = async (storagePath) => {
 };
 
 // src/server/config.ts
-var globalConfig = null;
-var migrationPromise = null;
-var configInitialized = false;
+var GLOBAL_KEY = "__nextDrive";
+var getGlobal = () => {
+  if (!globalThis[GLOBAL_KEY]) {
+    globalThis[GLOBAL_KEY] = {
+      config: null,
+      migrationPromise: null,
+      initialized: false
+    };
+  }
+  return globalThis[GLOBAL_KEY];
+};
 var driveConfiguration = async (config) => {
+  const g = getGlobal();
   if (mongoose.connection.readyState !== 1) {
     throw new Error("Database not connected. Please connect to Mongoose before initializing next-drive.");
   }
-  if (configInitialized && globalConfig) {
-    if (migrationPromise) await migrationPromise;
-    return globalConfig;
+  if (g.initialized && g.config) {
+    if (g.migrationPromise) await g.migrationPromise;
+    return g.config;
   }
   const resolvedPath = config.storage?.path || path.join(os3.tmpdir(), "next-drive-data");
   const mode = config.mode || "NORMAL";
   if (mode === "ROOT") {
-    globalConfig = {
+    g.config = {
       ...config,
       mode: "ROOT",
       storage: {
         ...config.storage,
         path: resolvedPath
       },
-      security: config.security || {
-        maxUploadSizeInBytes: 1024 * 1024 * 1024 * 10,
+      security: {
+        maxUploadSizeInBytes: config.security?.maxUploadSizeInBytes ?? 1024 * 1024 * 1024 * 10,
         // 10GB default for ROOT
-        allowedMimeTypes: ["*/*"]
+        allowedMimeTypes: config.security?.allowedMimeTypes ?? ["*/*"],
+        signedUrls: config.security?.signedUrls,
+        trash: config.security?.trash
       }
     };
   } else {
     if (!config.information) {
       throw new Error("information callback is required in NORMAL mode");
     }
-    globalConfig = {
+    g.config = {
       ...config,
       mode: "NORMAL",
       storage: {
@@ -285,16 +296,17 @@ var driveConfiguration = async (config) => {
       information: config.information
     };
   }
-  configInitialized = true;
-  if (!migrationPromise) {
-    migrationPromise = runMigrations(resolvedPath);
+  g.initialized = true;
+  if (!g.migrationPromise) {
+    g.migrationPromise = runMigrations(resolvedPath);
   }
-  await migrationPromise;
-  return globalConfig;
+  await g.migrationPromise;
+  return g.config;
 };
 var getDriveConfig = () => {
-  if (!globalConfig) throw new Error("Drive configuration not initialized");
-  return globalConfig;
+  const g = getGlobal();
+  if (!g.config) throw new Error("Drive configuration not initialized");
+  return g.config;
 };
 var getDriveInformation = async (req) => {
   const config = getDriveConfig();
@@ -351,7 +363,7 @@ var validateMimeType = (mime, allowedTypes) => {
   });
 };
 var computeFileHash = (filePath) => new Promise((resolve, reject) => {
-  const hash = crypto3.createHash("sha256");
+  const hash = crypto2.createHash("sha256");
   const stream = fs.createReadStream(filePath);
   stream.on("data", (data) => hash.update(data));
   stream.on("end", () => resolve(hash.digest("hex")));
@@ -1273,7 +1285,7 @@ var driveGetUrl = (fileId, options) => {
   } else {
     expiryTimestamp = Math.floor(Date.now() / 1e3) + expiresIn;
   }
-  const signature = crypto3.createHmac("sha256", secret).update(`${fileId}:${expiryTimestamp}`).digest("hex");
+  const signature = crypto2.createHmac("sha256", secret).update(`${fileId}:${expiryTimestamp}`).digest("hex");
   const token = Buffer.from(`${expiryTimestamp}:${signature}`).toString("base64url");
   return `/api/drive?action=serve&id=${fileId}&token=${token}`;
 };
@@ -1539,7 +1551,7 @@ var driveUpload = async (source, key, options) => {
     if (!fs.existsSync(tempDir)) {
       fs.mkdirSync(tempDir, { recursive: true });
     }
-    tempFilePath = path.join(tempDir, `upload-${crypto3.randomUUID()}.tmp`);
+    tempFilePath = path.join(tempDir, `upload-${crypto2.randomUUID()}.tmp`);
     fs.writeFileSync(tempFilePath, source);
     sourceFilePath = tempFilePath;
     fileSize = source.length;
@@ -1548,7 +1560,7 @@ var driveUpload = async (source, key, options) => {
     if (!fs.existsSync(tempDir)) {
       fs.mkdirSync(tempDir, { recursive: true });
     }
-    tempFilePath = path.join(tempDir, `upload-${crypto3.randomUUID()}.tmp`);
+    tempFilePath = path.join(tempDir, `upload-${crypto2.randomUUID()}.tmp`);
     const writeStream = fs.createWriteStream(tempFilePath);
     await new Promise((resolve, reject) => {
       source.pipe(writeStream);
@@ -1656,6 +1668,21 @@ var getProvider = async (req, owner) => {
   if (account.metadata.provider === "GOOGLE") return { provider: GoogleDriveProvider, accountId: account._id.toString() };
   return { provider: LocalStorageProvider };
 };
+var addSignedUrlToken = (item, config) => {
+  if (!config.security?.signedUrls?.enabled || !config.security.signedUrls.secret) {
+    return item;
+  }
+  const { secret, expiresIn } = config.security.signedUrls;
+  const expiryTimestamp = Math.floor(Date.now() / 1e3) + expiresIn;
+  const signature = crypto2.createHmac("sha256", secret).update(`${item.id}:${expiryTimestamp}`).digest("hex");
+  return { ...item, token: Buffer.from(`${expiryTimestamp}:${signature}`).toString("base64url") };
+};
+var addSignedUrlTokens = (items, config) => {
+  if (!config.security?.signedUrls?.enabled || !config.security.signedUrls.secret) {
+    return items;
+  }
+  return items.map((item) => addSignedUrlToken(item, config));
+};
 var applyCorsHeaders = (req, res, config) => {
   const cors = config.cors;
   if (!cors?.enabled) return false;
@@ -1737,7 +1764,7 @@ var driveAPIHandler = async (req, res) => {
             return res.status(401).json({ status: 401, message: "Token expired" });
           }
           const { secret } = config.security.signedUrls;
-          const expectedSignature = crypto3.createHmac("sha256", secret).update(`${id}:${expiry}`).digest("hex");
+          const expectedSignature = crypto2.createHmac("sha256", secret).update(`${id}:${expiry}`).digest("hex");
           if (signature !== expectedSignature) {
             return res.status(401).json({ status: 401, message: "Invalid token" });
           }
@@ -2011,15 +2038,7 @@ var driveAPIHandler = async (req, res) => {
         }
         if (afterId) query._id = { $lt: afterId };
         const items = await drive_default.find(query, {}, { sort: { order: 1, _id: -1 }, limit });
-        let plainItems = await Promise.all(items.map((item) => item.toClient()));
-        if (config.security?.signedUrls?.enabled && config.security.signedUrls.secret) {
-          const { secret, expiresIn } = config.security.signedUrls;
-          plainItems = plainItems.map((item) => {
-            const expiryTimestamp = Math.floor(Date.now() / 1e3) + expiresIn;
-            const signature = crypto3.createHmac("sha256", secret).update(`${item.id}:${expiryTimestamp}`).digest("hex");
-            return { ...item, token: Buffer.from(`${expiryTimestamp}:${signature}`).toString("base64url") };
-          });
-        }
+        const plainItems = addSignedUrlTokens(await Promise.all(items.map((item) => item.toClient())), config);
         res.status(200).json({ status: 200, message: "Items retrieved", data: { items: plainItems, hasMore: items.length === limit } });
         return;
       }
@@ -2046,15 +2065,7 @@ var driveAPIHandler = async (req, res) => {
         }
         if (folderId && folderId !== "root") query.parentId = folderId;
         const items = await drive_default.find(query, {}, { limit, sort: { createdAt: -1 } });
-        let plainItems = await Promise.all(items.map((i) => i.toClient()));
-        if (config.security?.signedUrls?.enabled && config.security.signedUrls.secret) {
-          const { secret, expiresIn } = config.security.signedUrls;
-          plainItems = plainItems.map((item) => {
-            const expiryTimestamp = Math.floor(Date.now() / 1e3) + expiresIn;
-            const signature = crypto3.createHmac("sha256", secret).update(`${item.id}:${expiryTimestamp}`).digest("hex");
-            return { ...item, token: Buffer.from(`${expiryTimestamp}:${signature}`).toString("base64url") };
-          });
-        }
+        const plainItems = addSignedUrlTokens(await Promise.all(items.map((i) => i.toClient())), config);
         return res.status(200).json({ status: 200, message: "Results", data: { items: plainItems } });
       }
       // ** 3. UPLOAD **
@@ -2112,7 +2123,7 @@ var driveAPIHandler = async (req, res) => {
               return res.status(413).json({ status: 413, message: "Storage quota exceeded" });
             }
           }
-          currentUploadId = crypto3.randomUUID();
+          currentUploadId = crypto2.randomUUID();
           const uploadDir = path.join(tempBaseDir, currentUploadId);
           fs.mkdirSync(uploadDir, { recursive: true });
           const metadata = {
@@ -2217,7 +2228,7 @@ var driveAPIHandler = async (req, res) => {
                 const item = await provider.uploadFile(drive, finalTempPath, meta.accountId);
                 fs.rmSync(uploadDir, { recursive: true, force: true });
                 const newQuota = await provider.getQuota(meta.owner, meta.accountId, information.storage.quotaInBytes);
-                res.status(200).json({ status: 200, message: "Upload complete", data: { type: "UPLOAD_COMPLETE", driveId: String(drive._id), item }, statistic: { storage: newQuota } });
+                res.status(200).json({ status: 200, message: "Upload complete", data: { type: "UPLOAD_COMPLETE", driveId: String(drive._id), item: addSignedUrlToken(item, config) }, statistic: { storage: newQuota } });
               } catch (err) {
                 await drive_default.deleteOne({ _id: drive._id });
                 throw err;
@@ -2259,7 +2270,7 @@ var driveAPIHandler = async (req, res) => {
         const folderData = createFolderBodySchema.safeParse(req.body);
         if (!folderData.success) return res.status(400).json({ status: 400, message: folderData.error.errors[0].message });
         const { name, parentId } = folderData.data;
-        const item = await provider.createFolder(name, parentId ?? null, owner, accountId);
+        const item = addSignedUrlToken(await provider.createFolder(name, parentId ?? null, owner, accountId), config);
         return res.status(201).json({ status: 201, message: "Folder created", data: { item } });
       }
       // ** 5. DELETE **
@@ -2314,15 +2325,7 @@ var driveAPIHandler = async (req, res) => {
           trashedAt: { $ne: null }
         };
         const items = await drive_default.find(query, {}, { sort: { trashedAt: -1 } });
-        let plainItems = await Promise.all(items.map((item) => item.toClient()));
-        if (config.security?.signedUrls?.enabled && config.security.signedUrls.secret) {
-          const { secret, expiresIn } = config.security.signedUrls;
-          plainItems = plainItems.map((item) => {
-            const expiryTimestamp = Math.floor(Date.now() / 1e3) + expiresIn;
-            const signature = crypto3.createHmac("sha256", secret).update(`${item.id}:${expiryTimestamp}`).digest("hex");
-            return { ...item, token: Buffer.from(`${expiryTimestamp}:${signature}`).toString("base64url") };
-          });
-        }
+        const plainItems = addSignedUrlTokens(await Promise.all(items.map((item) => item.toClient())), config);
         return res.status(200).json({
           status: 200,
           message: "Trash items",
@@ -2377,14 +2380,14 @@ var driveAPIHandler = async (req, res) => {
             console.error(`Failed to move item ${id}`, e);
           }
         }
-        return res.status(200).json({ status: 200, message: "Moved", data: { items } });
+        return res.status(200).json({ status: 200, message: "Moved", data: { items: addSignedUrlTokens(items, config) } });
       }
       // ** 8. RENAME **
       case "rename": {
         const renameData = renameBodySchema.safeParse({ id: req.query.id, ...req.body });
         if (!renameData.success) return res.status(400).json({ status: 400, message: "Invalid data" });
         const { id, newName } = renameData.data;
-        const item = await provider.rename(id, newName, owner, accountId);
+        const item = addSignedUrlToken(await provider.rename(id, newName, owner, accountId), config);
         return res.status(200).json({ status: 200, message: "Renamed", data: { item } });
       }
       // ** 9. THUMBNAIL **
@@ -2398,5 +2401,5 @@ var driveAPIHandler = async (req, res) => {
 };
 
 export { driveAPIHandler, driveConfiguration, driveDelete, driveFilePath, driveFileSchemaZod, driveGetUrl, driveInfo, driveList, driveReadFile, driveUpload, getDriveConfig, getDriveInformation };
-//# sourceMappingURL=chunk-SSOIUMFQ.js.map
-//# sourceMappingURL=chunk-SSOIUMFQ.js.map
+//# sourceMappingURL=chunk-N3C7IKRK.js.map
+//# sourceMappingURL=chunk-N3C7IKRK.js.map