kalai-attach 1.0.5 → 1.0.6

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "kalai-attach",
   "description": "CAP cds-plugin providing image and attachment storing out-of-the-box.",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "repository": "capjsattachments-kalai",
   "author": "Kalai",
   "homepage": "https://github.com/Kalaikovan-airdit",

package/srv/azure-blob-storage.js

@@ -110,7 +110,29 @@ module.exports = class AzureAttachmentsService extends require("./object-store")
 
       // The file upload has to be done first, so super.put can compute the hash and trigger malware scan
       await blobClient.upload(_content, contentLength)
-      await super.put(attachments, metadata)
+      // await super.put(attachments, metadata)
+
+      try {
+    const { content, ...metadata } = data;
+    const blobName = metadata.url || metadata.ID;
+    const blobClient = containerClient.getBlockBlobClient(blobName);
+
+    // 1. Upload to Azure first (Staging)
+    await blobClient.upload(content, content.length);
+
+    // 2. Call super.put - This triggers the malware scan
+    // If the scanner finds a virus, this call will THROW an error
+    await super.put(attachments, data);
+
+    LOG.info(`Scan passed and file uploaded: ${metadata.filename}`);
+  } catch (err) {
+    // 3. If scan fails (or any other error), clean up Azure
+    if (err.code === 403 || err.message.includes('malware')) {
+       LOG.error(`Malware detected in ${data.filename}! Deleting from Azure...`);
+       await this.delete(data.url || data.ID);
+    }
+    throw err;
+  }
 
       const duration = Date.now() - startTime
       LOG.debug('File upload to Azure Blob Storage completed successfully', {