@tstdl/base 0.92.135 → 0.92.136

package/document-management/api/document-management.api.d.ts

@@ -74,6 +74,9 @@ export declare const documentManagementApiDefinition: {
         initiateDocumentUpload: {
             resource: string;
             method: "POST";
+            parameters: import("../../schema/index.js").ObjectSchema<{
+                contentLength: number;
+            }>;
             result: import("../../schema/index.js").ObjectSchema<{
                 uploadId: string;
                 uploadUrl: string;
@@ -381,6 +384,9 @@ declare const _DocumentManagementApi: import("../../api/client/index.js").ApiCli
         initiateDocumentUpload: {
             resource: string;
             method: "POST";
+            parameters: import("../../schema/index.js").ObjectSchema<{
+                contentLength: number;
+            }>;
             result: import("../../schema/index.js").ObjectSchema<{
                 uploadId: string;
                 uploadUrl: string;

package/document-management/api/document-management.api.js

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 import { compileClient } from '../../api/client/index.js';
 import { defineApi } from '../../api/index.js';
 import { ReplaceClass } from '../../injector/decorators.js';
-import { array, boolean, literal, object, optional, string } from '../../schema/index.js';
+import { array, boolean, literal, number, object, optional, string } from '../../schema/index.js';
 import { Document, DocumentCategory, DocumentRequest, DocumentRequestsTemplate, DocumentRequestTemplate, DocumentType } from '../models/index.js';
 import { addOrArchiveDocumentToOrFromCollectionParametersSchema, applyDocumentRequestsTemplateParametersSchema, createDocumentCategoryParametersSchema, createDocumentParametersSchema, createDocumentRequestParametersSchema, createDocumentRequestsTemplateParametersSchema, createDocumentRequestTemplateParametersSchema, createDocumentTypeParametersSchema, deleteDocumentRequestParametersSchema, deleteDocumentRequestsTemplateParametersSchema, deleteDocumentRequestTemplateParametersSchema, DocumentCategoryView, DocumentManagementData, DocumentRequestsTemplateData, loadDataParametersSchema, updateDocumentParametersSchema, updateDocumentRequestParametersSchema, updateDocumentRequestsTemplateParametersSchema, updateDocumentRequestTemplateParametersSchema } from '../service-models/index.js';
 export const documentManagementApiDefinition = defineApi({
@@ -69,6 +69,9 @@ export const documentManagementApiDefinition = defineApi({
         initiateDocumentUpload: {
             resource: 'document-uploads',
             method: 'POST',
+            parameters: object({
+                contentLength: number(),
+            }),
             result: object({
                 uploadId: string(),
                 uploadUrl: string(),

package/document-management/server/api/document-management.api.js

@@ -95,7 +95,7 @@ let DocumentManagementApiController = DocumentManagementApiController_1 = class
     async initiateDocumentUpload(context) {
         const token = await context.getToken();
         const subject = await this.#ancillaryService.getSubject(token);
-        return await this.#documentFileService.initiateUpload({ key: subject });
+        return await this.#documentFileService.initiateUpload({ key: subject, contentLength: context.parameters.contentLength });
     }
     async createDocument(context) {
         const token = await context.getToken();

package/document-management/server/module.d.ts

@@ -8,6 +8,7 @@ export declare class DocumentManagementConfig {
     fileUploadObjectStorageModule: string;
     filePreviewObjectStorageModule: string;
     database?: DatabaseConfig;
+    maxFileSize?: number;
 }
 export declare function configureDocumentManagement(config: DocumentManagementConfig): void;
 export declare function migrateDocumentManagementSchema(): Promise<void>;

package/document-management/server/module.js

@@ -8,6 +8,7 @@ export class DocumentManagementConfig {
     fileUploadObjectStorageModule;
     filePreviewObjectStorageModule;
     database;
+    maxFileSize;
 }
 ;
 export function configureDocumentManagement(config) {

package/document-management/server/services/document-file.service.d.ts

@@ -10,8 +10,9 @@ export declare class DocumentFileService extends Transactional {
      * The key could be the user id from the request token. This ensures that the file can only be created by the user who initiated the upload.
      * @returns upload information
      */
-    initiateUpload({ key }: {
+    initiateUpload({ key, contentLength }: {
         key: string;
+        contentLength: number;
     }): Promise<{
         uploadId: string;
         uploadUrl: string;

package/document-management/server/services/document-file.service.js

@@ -100,9 +100,12 @@ let DocumentFileService = DocumentFileService_1 = class DocumentFileService exte
      * The key could be the user id from the request token. This ensures that the file can only be created by the user who initiated the upload.
      * @returns upload information
      */
-    async initiateUpload({ key }) {
+    async initiateUpload({ key, contentLength }) {
+        if (contentLength > (this.#config.maxFileSize ?? Number.POSITIVE_INFINITY)) {
+            throw new ForbiddenError(`Content length exceeds the maximum limit of ${this.#config.maxFileSize} bytes.`);
+        }
         const id = getRandomString(64, Alphabet.LowerUpperCaseNumbers);
-        const url = await this.#fileUploadObjectStorage.getUploadUrl(id, currentTimestamp() + (5 * millisecondsPerMinute), { metadata: { 'upload-key': key } });
+        const url = await this.#fileUploadObjectStorage.getUploadUrl(id, currentTimestamp() + (5 * millisecondsPerMinute), { contentLength, metadata: { 'upload-key': key } });
         return { uploadId: id, uploadUrl: url };
     }
     async create(content, originalFileName) {
@@ -110,9 +113,14 @@ let DocumentFileService = DocumentFileService_1 = class DocumentFileService exte
         if (isUpload) {
             const object = await this.#fileUploadObjectStorage.getObject(content.uploadId);
             const objectMetadata = await object.getMetadata();
+            const objectContentLength = await object.getContentLength();
             if (content.uploadKey != objectMetadata['upload-key']) {
                 throw new ForbiddenError(`Invalid upload key`);
             }
+            if (objectContentLength > (this.#config.maxFileSize ?? Number.POSITIVE_INFINITY)) {
+                await this.#fileUploadObjectStorage.deleteObject(object.key);
+                throw new ForbiddenError(`Content length exceeds the maximum limit of ${this.#config.maxFileSize} bytes.`);
+            }
         }
         const contentAsUint8Array = isUpload
             ? await this.#fileUploadObjectStorage.getContent(content.uploadId)

package/object-storage/object-storage.d.ts

@@ -6,6 +6,8 @@ export type UploadObjectOptions = {
     metadata?: ObjectMetadata;
 };
 export type UploadUrlOptions = {
+    contentLength?: number;
+    contentType?: string;
     metadata?: ObjectMetadata;
 };
 export type CopyObjectOptions = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tstdl/base",
-  "version": "0.92.135",
+  "version": "0.92.136",
   "author": "Patrick Hein",
   "publishConfig": {
     "access": "public"