@muhgholy/next-drive 4.23.30 → 4.23.32

package/dist/{chunk-DNJRZKAF.js → chunk-IWV6G7HQ.js}

@@ -251,7 +251,7 @@ var getGlobal = () => {
       config: null,
       migrationPromise: null,
       initialized: false,
-      abuse: { ipHits: /* @__PURE__ */ new Map(), active: /* @__PURE__ */ new Map(), lastSweep: 0 }
+      abuse: { ipHits: /* @__PURE__ */ new Map(), active: /* @__PURE__ */ new Map(), lastSweep: 0, transformActive: 0 }
     };
   }
   return globalThis[GLOBAL_KEY];
@@ -281,6 +281,9 @@ var driveConfiguration = async (config) => {
         allowedMimeTypes: config.security?.allowedMimeTypes ?? ["*/*"],
         signedUrls: config.security?.signedUrls,
         trash: config.security?.trash,
+        publicRateLimit: config.security?.publicRateLimit,
+        transformConcurrency: config.security?.transformConcurrency,
+        cacheMaxAgeDays: config.security?.cacheMaxAgeDays,
         unauthenticated: config.security?.unauthenticated
       }
     };
@@ -300,11 +303,19 @@ var driveConfiguration = async (config) => {
         allowedMimeTypes: config.security?.allowedMimeTypes ?? ["*/*"],
         signedUrls: config.security?.signedUrls,
         trash: config.security?.trash,
+        publicRateLimit: config.security?.publicRateLimit,
+        transformConcurrency: config.security?.transformConcurrency,
+        cacheMaxAgeDays: config.security?.cacheMaxAgeDays,
         unauthenticated: config.security?.unauthenticated
       },
       information: config.information
     };
   }
+  if (!g.config.security?.signedUrls?.enabled && !g.config.security?.publicRateLimit) {
+    console.warn(
+      '[next-drive] security.signedUrls is disabled and security.publicRateLimit is unset - "?action=serve"/"thumbnail" will serve any valid file id to anyone, with no rate limit. Enable security.signedUrls (recommended) and/or set security.publicRateLimit if these files should not be fully public.'
+    );
+  }
   g.initialized = true;
   if (!g.migrationPromise) {
     g.migrationPromise = runMigrations(resolvedPath);
@@ -951,14 +962,36 @@ var GoogleDriveProvider = {
     }
   },
   openStream: async (item, accountId) => {
+    if (item.information.type === "FOLDER") throw new Error("Could not open Google Drive file: folders cannot be streamed");
+    const cachePath = path.join(getDriveConfig().storage.path, "file", item._id.toString(), "data.bin");
+    if (fs.existsSync(cachePath)) {
+      return {
+        stream: fs.createReadStream(cachePath),
+        mime: item.information.mime,
+        size: fs.statSync(cachePath).size
+      };
+    }
     const { client } = await createAuthClient(item.owner, accountId || item.storageAccountId?.toString());
     const drive = google.drive({ version: "v3", auth: client });
     if (!item.provider?.google?.id) throw new Error("Could not open Google Drive file: its Google file ID is missing");
-    if (item.information.type === "FOLDER") throw new Error("Could not open Google Drive file: folders cannot be streamed");
     const res = await drive.files.get(
       { fileId: item.provider.google.id, alt: "media" },
       { responseType: "stream" }
     );
+    const fileDir = path.dirname(cachePath);
+    if (!fs.existsSync(fileDir)) fs.mkdirSync(fileDir, { recursive: true });
+    const tempPath = `${cachePath}.tmp`;
+    const writeStream = fs.createWriteStream(tempPath);
+    res.data.pipe(writeStream);
+    writeStream.on("finish", () => {
+      try {
+        fs.renameSync(tempPath, cachePath);
+      } catch {
+        fs.unlinkSync(tempPath);
+      }
+    });
+    writeStream.on("error", () => fs.unlink(tempPath, () => {
+    }));
     return {
       stream: res.data,
       mime: item.information.mime,
@@ -1706,7 +1739,7 @@ var driveCleanup = async () => {
     }
   }
   try {
-    const { getTusServer: getTusServer2 } = await import('./tus-35IUZMFV.js');
+    const { getTusServer: getTusServer2 } = await import('./tus-C4T5ZDTG.js');
     await getTusServer2().cleanUpExpiredUploads();
   } catch (e) {
     console.error("[next-drive] Failed to clean up expired tus uploads:", e);
@@ -1766,6 +1799,12 @@ var countActiveAnon = (store) => {
   return store.active.size;
 };
 var releaseSlot = (id) => abuseStore()?.active.delete(id);
+var resolveTusCorsOptions = (cors) => {
+  if (!cors?.enabled) return { allowedCredentials: false };
+  const { origins, credentials = false } = cors;
+  if (!origins || origins === "*") return { allowedCredentials: credentials };
+  return { allowedOrigins: Array.isArray(origins) ? origins : [origins], allowedCredentials: credentials };
+};
 var getTusServer = () => {
   const g = globalThis;
   g.__nextDrive = g.__nextDrive ?? {};
@@ -1774,6 +1813,7 @@ var getTusServer = () => {
   const tusDir = path.join(config.storage.path, "tus");
   fs.mkdirSync(tusDir, { recursive: true });
   const apiPath = new URL(config.apiUrl || "/api/drive", "http://x").pathname;
+  const { allowedOrigins, allowedCredentials } = resolveTusCorsOptions(config.cors);
   const server = new Server({
     path: apiPath,
     datastore: new FileStore({ directory: tusDir, expirationPeriodInMilliseconds: UPLOAD_EXPIRATION_MS }),
@@ -1781,6 +1821,8 @@ var getTusServer = () => {
     // ** must be declared here to survive cross-origin requests.
     allowedHeaders: ["X-Drive-Account"],
     exposedHeaders: ["X-Drive-Item"],
+    allowedOrigins,
+    allowedCredentials,
     maxSize: (req) => {
       const ctx = getCtx(req);
       if (!ctx) return Number.MAX_SAFE_INTEGER;
@@ -1820,7 +1862,7 @@ var getTusServer = () => {
             }
           }
           const nreq = req.__nodeReq;
-          const ip = (nreq && abuse.clientId?.(nreq)) ?? (abuse.trustedHeaders ?? ["cf-connecting-ip", "x-forwarded-for"]).map((h) => req.headers.get(h)).find(Boolean)?.split(",")[0].trim() ?? nreq?.socket?.remoteAddress ?? "unknown";
+          const ip = (nreq && abuse.clientId?.(nreq)) ?? (abuse.trustedHeaders ?? ["cf-connecting-ip", "x-real-ip", "x-forwarded-for"]).map((h) => req.headers.get(h)).find(Boolean)?.split(",")[0].trim() ?? nreq?.socket?.remoteAddress ?? "unknown";
           const hits = (store.ipHits.get(ip) ?? []).filter((t) => now - t < 36e5);
           const perIp = abuse.perIp;
           if (perIp && hits.filter((t) => now - t < perIp.windowMinutes * 6e4).length >= perIp.max) throw { status_code: 429, body: "Too many uploads, please try again later" };
@@ -1942,6 +1984,6 @@ var handleUpload = async (req, res, ctx) => {
   res.end(response.body ? Buffer.from(await response.arrayBuffer()) : void 0);
 };
 
-export { GoogleDriveProvider, LocalStorageProvider, account_default, driveCleanup, driveConfiguration, driveConfirm, driveDelete, driveFilePath, driveGetUrl, driveInfo, driveList, driveListFiles, drivePurgeExpired, driveReadFile, driveUpload, drive_default, getDriveConfig, getDriveInformation, getImageSettings, getTusServer, handleUpload, resolveProvider, withSignedUrl, withSignedUrls };
-//# sourceMappingURL=chunk-DNJRZKAF.js.map
-//# sourceMappingURL=chunk-DNJRZKAF.js.map
+export { GoogleDriveProvider, LocalStorageProvider, account_default, driveCleanup, driveConfiguration, driveConfirm, driveDelete, driveFilePath, driveGetUrl, driveInfo, driveList, driveListFiles, drivePurgeExpired, driveReadFile, driveUpload, drive_default, getDriveConfig, getDriveInformation, getImageSettings, getTusServer, handleUpload, resolveProvider, resolveTusCorsOptions, withSignedUrl, withSignedUrls };
+//# sourceMappingURL=chunk-IWV6G7HQ.js.map
+//# sourceMappingURL=chunk-IWV6G7HQ.js.map