@opengis/cms 0.0.10 → 0.0.11

package/server/routes/site/controllers/downloadMedia.js

@@ -0,0 +1,48 @@
+import path from 'node:path';
+import { existsSync } from 'node:fs';
+import { readFile } from 'node:fs/promises';
+
+import { config, getFolder, pgClients } from "@opengis/fastify-table/utils.js";
+
+const rootDir = getFolder(config, 'local');
+
+export default async function downloadMedia({
+    pg = pgClients.client, params = {}, query = {},
+}, reply) {
+    if (!params?.id) {
+        return reply.status(400).send('not enough params: id');
+    }
+
+    if (!pg.pk?.['site.media']) {
+        return reply.status(404).send('table not found');
+    }
+
+    const { filename, mime, id, url: relpath } = await pg.query(
+        'select media_id as id, filename, mime, url from site.media where media_id = $1 and url is not null',
+        [params.id],
+    ).then(el => el.rows?.[0] || {});
+
+    if (!id) {
+        return reply.status(404).send('media not found: ' + params.id);
+    }
+
+    const filepath = path.join(rootDir, relpath);
+
+    if (!existsSync(filepath)) {
+        return reply.status(404).send('file not found');
+    }
+
+    const buffer = await readFile(filepath, { buffer: true });
+
+    // skip xml load for preview
+    if (query.preview && path.extname(filename) !== '.xml') {
+        return reply.headers({ 'Content-Type': mime }).send(buffer);
+    }
+
+    return reply
+        .headers({
+            'Content-Type': mime,
+            'Content-Disposition': `attachment; filename=${filename || path.basename(filepath)}`,
+        })
+        .send(buffer);
+}

package/server/routes/site/controllers/getPermissions.js

@@ -0,0 +1,16 @@
+import { pgClients } from '@opengis/fastify-table/utils.js';
+
+export default async function getPermissions(req, reply) {
+    const { pg = pgClients.client, params = {}, user = {} } = req;
+
+    if (!user?.uid) {
+        return reply.status(401).send('unauthorized');
+    }
+
+    const { rows = [] } = await pg.query(
+        `select * from site.permissions where ${params.id ? 'user_id=$1' : 'true'}`,
+        [params.id].filter(Boolean),
+    );
+
+    return { permissions: rows };
+}

package/server/routes/site/controllers/listMedia.js

@@ -0,0 +1,60 @@
+import path from 'node:path';
+import { existsSync, mkdirSync } from 'node:fs';
+import { readdir, stat } from 'node:fs/promises';
+
+import { config, getFolder, pgClients } from '@opengis/fastify-table/utils.js';
+
+const rootDir = getFolder(config, 'local');
+mkdirSync(path.join(rootDir, 'media'), { recursive: true });
+
+export default async function listMedia(req, reply) {
+    const { pg = pgClients.client, query = {} } = req;
+    const { subdir = '' } = query;
+
+    if (!pg.pk?.['site.media']) {
+        return reply.status(404).send('table not found');
+    }
+
+    if (typeof subdir !== 'string' || subdir.includes('..')) {
+        return reply.status(403).send('invalid params: subdir');
+    }
+
+    const relpath = path.join('/media', subdir).replace(/\\/g, '/');
+    const dirpath = path.join(rootDir, relpath).replace(/\\/g, '/');
+
+    if (!existsSync(dirpath)) {
+        return { data: [], relpath, msg: 'directory not exists' };
+    }
+
+    const { rows = [] } = await pg.query(
+        `select 
+            media_id as id, filename, filetype, filesize, url, description, alt,
+            mime, preview_url, created_at, updated_at, created_by, updated_by
+        from site.media
+        where url ~ $1`,
+        [relpath],
+    );
+
+    if (!rows.length && false) {
+        return { data: [], relpath, msg: 'empty rows' };
+    }
+
+    const isDirectory = (await stat(dirpath)).isDirectory();
+
+    const items = isDirectory ? await readdir(dirpath, { withFileTypes: true }) : [];
+
+    rows.forEach(row => Object.assign(row, {
+        url: `${req.routeOptions.url}/${row.id}/file`,
+        filepath: row.url,
+        metadata: `${req.routeOptions.url}/${row.id}`,
+        exists: !!items.find(el => el.isFile() && el.name === path.basename(row.url))
+    }));
+
+    const result = { relpath, data: rows };
+
+    if (config.debug) {
+        Object.assign(result, { rootDir });
+    }
+
+    return result;
+}

package/server/routes/site/controllers/metadataMedia.js

@@ -0,0 +1,37 @@
+import path from 'node:path';
+import { existsSync } from 'node:fs';
+
+import { config, getFolder, pgClients } from "@opengis/fastify-table/utils.js";
+
+const rootDir = getFolder(config, 'local');
+
+export default async function metadataMedia({
+    routeOptions = {}, pg = pgClients.client, params = {},
+}, reply) {
+    if (!params?.id) {
+        return reply.status(400).send('not enough params: id');
+    }
+
+    if (!pg.pk?.['site.media']) {
+        return reply.status(404).send('table not found');
+    }
+
+    const data = await pg.query(
+        'select * from site.media where media_id = $1 and url is not null',
+        [params.id],
+    ).then(el => el.rows?.[0]);
+
+    if (!data) {
+        return reply.status(404).send('media not found: ' + params.id);
+    }
+
+    const filepath = path.join(rootDir, data.url);
+
+    Object.assign(data, {
+        url: `${routeOptions.url.replace(':id', params.id)}/file`,
+        filepath: data.url,
+        exists: existsSync(filepath),
+    });
+
+    return reply.status(200).send(data);
+}

package/server/routes/site/controllers/setPermissions.js

@@ -0,0 +1,50 @@
+import { logger, pgClients, dataInsert } from '@opengis/fastify-table/utils.js';
+
+export default async function setPermissions(req, reply) {
+    const { pg = pgClients.client, params = {}, user = {}, body = {} } = req;
+
+    if (!user?.uid) {
+        return reply.status(401).send('unauthorized');
+    }
+
+    if (!params.id) {
+        return reply.status(400).send('not enough params: id');
+    }
+
+    const client = await pg.connect()
+    const result = {};
+    try {
+        await client.query('BEGIN');
+
+        const { rowCount = 0 } = await client.query(
+            `delete from site.permissions where user_id=$1`,
+            [params.id].filter(Boolean),
+        );
+
+        Object.assign(result, { deleted: rowCount });
+
+        if (Array.isArray(body.permissions) && body.permissions?.length) {
+            body.permissions.forEach((el) => {
+                Object.assign(el, { user_id: el.user_id || params.id });
+            });
+
+            await Promise.all(body.permissions.map(async (el) => dataInsert({
+                pg: client,
+                table: 'site.permissions',
+                data: el,
+                uid: user.uid,
+            })));
+
+            Object.assign(result, { inserted: body.permissions.length });
+        }
+
+        await client.query('COMMIT');
+        return reply.status(200).send(result);
+    } catch (err) {
+        await client.query('ROLLBACK');
+        logger.file('cms/permissions', { error: err.toString(), stack: err.stack });
+        return reply.status(500).send('set permissions error');
+    } finally {
+        client.release();
+    }
+}

package/server/routes/site/controllers/uploadMedia.js

@@ -0,0 +1,66 @@
+import path from 'node:path';
+import { mkdir, rename } from 'node:fs/promises';
+
+import { config, getFolder, dataInsert, pgClients } from "@opengis/fastify-table/utils.js";
+
+import { getMimeType, getFileType, uploadMultiPart } from '@opengis/fastify-file/utils.js';
+import { existsSync } from 'node:fs';
+
+const rootDir = getFolder(config, 'local');
+
+export default async function uploadMedia(req, reply) {
+    const { pg = pgClients.client, user = {}, body = {}, query = {} } = req;
+
+    if (!pg.pk?.['site.media']) {
+        return reply.status(404).send('table not found');
+    }
+
+    if (query.subdir && (typeof query.subdir !== 'string' || query.subdir.includes('..'))) {
+        return reply.status(403).send('invalid query params: subdir');
+    }
+
+    // upload assets
+    if (req.headers['content-type']?.split?.(';')?.shift?.() === 'multipart/form-data') {
+        const file = await uploadMultiPart(req);
+        const filename = `${file.newFilename}${path.extname(file.filepath)}`;
+        const mime = getMimeType(file.filepath);
+        const filetype = getFileType(file.filepath);
+
+        const newfilepath = path.join(rootDir, 'media', query.subdir || '', filename);
+        await mkdir(path.dirname(newfilepath), { recursive: true });
+        await rename(file.filepath, newfilepath);
+
+        const relpath = path.join('/media', query.subdir || '', filename).replace(/\\/g, '/');
+        const id = await dataInsert({
+            pg,
+            table: 'site.media',
+            data: {
+                filename: file.originalFilename,
+                filetype,
+                url: relpath,
+                mime,
+                filesize: file.size,
+            },
+            uid: user?.uid || 0,
+        }).then(el => el?.rows?.[0]?.media_id);
+
+        return reply.status(200).send({
+            relpath: path.join('/media', query.subdir || '').replace(/\\/g, '/'),
+            id,
+            filename,
+            filetype,
+            type: 'file',
+        });
+    }
+
+    // create directory
+    const relpath = path.join('/media', query.subdir).replace(/\\/g, '/');
+    const dirpath = path.join(rootDir, relpath);
+    await mkdir(dirpath, { recursive: true });
+
+    return reply.status(200).send({
+        relpath,
+        dirname: path.basename(query.subdir),
+        type: 'dir',
+    });
+}

package/server/routes/site/index.mjs

@@ -0,0 +1,34 @@
+// perimissions
+import getPermissions from './controllers/getPermissions.js';
+import setPermissions from './controllers/setPermissions.js';
+
+// media
+import listMedia from './controllers/listMedia.js';
+import metadata from './controllers/metadataMedia.js';
+import uploadMedia from './controllers/uploadMedia.js';
+import del from './controllers/deleteMedia.js';
+import download from './controllers/downloadMedia.js';
+
+const schemaObj = {
+    type: 'object',
+    properties: {
+        params: {
+            type: 'string',
+            enum: ['preview', 'download'],
+        }
+    }
+};
+
+const params = { config: { policy: ['site', 'user'] } };
+
+export default async function route(app) {
+    app.post('/site-permissions/:id', params, setPermissions);
+    app.get('/site-permissions/:id?', params, getPermissions);
+
+    app.post('/site-media/upload', params, uploadMedia);
+    app.get('/site-media', params, listMedia);
+    app.get('/site-media/:id/file', { ...params, schema: schemaObj }, download);
+    app.get('/site-media/:id', params, metadata);
+    app.delete('/site-media/:id', params, del);
+    app.get('/site-media/:id/delete', params, del); // debug
+}