sharedkernel 2.3.0__tar.gz → 2.4.1__tar.gz

{sharedkernel-2.3.0 → sharedkernel-2.4.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sharedkernel
-Version: 2.3.0
+Version: 2.4.1
 Summary: sharekernel is a shared package between all python projects
 Author: Smilinno
 Description-Content-Type: text/markdown
@@ -29,6 +29,10 @@ Dynamic: summary
 this is a shared kernel package
 
 # Change Log
+### Version 2.4.1
+- Fix file validation
+### Version 2.4.0
+- Implement file validation
 ### Version 2.3.0
 - Implement multipart uploader for S3
 ### Version 2.2.7

{sharedkernel-2.3.0 → sharedkernel-2.4.1}/README.md

@@ -2,6 +2,10 @@
 this is a shared kernel package
 
 # Change Log
+### Version 2.4.1
+- Fix file validation
+### Version 2.4.0
+- Implement file validation
 ### Version 2.3.0
 - Implement multipart uploader for S3
 ### Version 2.2.7

{sharedkernel-2.3.0 → sharedkernel-2.4.1}/setup.py

@@ -37,7 +37,7 @@ setup(
         "deepdiff",
     ],
     # *strongly* suggested for sharing
-    version="2.3.0",
+    version="2.4.1",
     description="sharekernel is a shared package between all python projects",
     long_description=long_description,
     long_description_content_type="text/markdown",

sharedkernel-2.4.1/sharedkernel/file_validation.py

@@ -0,0 +1,85 @@
+from functools import wraps
+from fastapi import HTTPException
+import magic
+
+DEFAULT_ALLOWED_MIME_TYPES = (
+    "image/jpeg",
+    "image/png",
+    "image/gif",
+    "image/webp",
+    "application/pdf",
+    "application/msword",
+    "application/x-ole-storage",
+    "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+    "application/vnd.ms-excel",
+    "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+    "application/vnd.ms-powerpoint",
+    "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+    "text/plain",
+    "text/csv",
+    "audio/mpeg",
+    "audio/wav",
+    "audio/x-wav",
+    "audio/mp3",
+    "application/zip",
+)
+
+
+def get_mime_type(fileobj) -> str:
+    """
+    Detects the real MIME type of a file based on its content (magic bytes),
+    not the client-provided extension or Content-Type header.
+    """
+    try:
+        fileobj.seek(0)
+        sample = fileobj.read(2048)
+        fileobj.seek(0)
+        m = magic.Magic(mime=True)
+        mime = m.from_buffer(sample)
+        return mime or "application/octet-stream"
+    except Exception:
+        return "application/octet-stream"
+
+
+def validate_file_type(fileobj, allowed_mimes=None):
+    """
+    Validates the uploaded file’s real MIME type against the allowed list.
+    """
+    allowed_mimes = allowed_mimes or DEFAULT_ALLOWED_MIME_TYPES
+    mime = get_mime_type(fileobj)
+    if mime not in allowed_mimes:
+        raise ValueError(f"قالب فایل '{fileobj.name}' معتبر نیست. لطفاً یکی از قالب‌های مجاز را انتخاب کنید.")
+    return mime
+
+
+def is_upload_file(obj):
+    return (
+        hasattr(obj, "file") and
+        hasattr(obj, "filename") and
+        callable(getattr(obj.file, "read", None)) and
+        callable(getattr(obj.file, "seek", None))
+    )
+
+
+def validate_upload_file(allowed_mimes=None):
+    allowed_mimes = allowed_mimes or DEFAULT_ALLOWED_MIME_TYPES
+
+    def decorator(func):
+            @wraps(func)
+            async def wrapper(*args, **kwargs):
+                for value in list(args) + list(kwargs.values()):
+                    if is_upload_file(value):
+                        try:
+                            validate_file_type(value.file, allowed_mimes)
+                        except ValueError as e:
+                            raise HTTPException(status_code=400, detail=str(e))
+                    elif isinstance(value, list):
+                        for f in value:
+                            if is_upload_file(f):
+                                try:
+                                    validate_file_type(f.file, allowed_mimes)
+                                except ValueError as e:
+                                    raise HTTPException(status_code=400, detail=str(e))
+                return await func(*args, **kwargs)
+            return wrapper
+    return decorator

{sharedkernel-2.3.0 → sharedkernel-2.4.1}/sharedkernel.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sharedkernel
-Version: 2.3.0
+Version: 2.4.1
 Summary: sharekernel is a shared package between all python projects
 Author: Smilinno
 Description-Content-Type: text/markdown
@@ -29,6 +29,10 @@ Dynamic: summary
 this is a shared kernel package
 
 # Change Log
+### Version 2.4.1
+- Fix file validation
+### Version 2.4.0
+- Implement file validation
 ### Version 2.3.0
 - Implement multipart uploader for S3
 ### Version 2.2.7

{sharedkernel-2.3.0 → sharedkernel-2.4.1}/sharedkernel.egg-info/SOURCES.txt

@@ -4,6 +4,7 @@ sharedkernel/common.py
 sharedkernel/data_format_converter.py
 sharedkernel/date_converter.py
 sharedkernel/diff_utils.py
+sharedkernel/file_validation.py
 sharedkernel/jwt_service.py
 sharedkernel/multipart_upload.py
 sharedkernel/regex_masking.py