xwx.moe/el.xwx.moe
xwx.moe/ el.xwx.moe
1
0
Disbranĉigi 0
Fontkodo Issues Tirpetoj Actions Packages Projects Eldonoj Wiki Activity

minor change

This commit is contained in:
daniel31x13 2023-11-19 14:40:11 -05:00
parent 988d647521
commit 0579395e93
1 changed files with 46 additions and 45 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

91
pages/api/v1/avatar/[id].ts
View File

@ -1,7 +1,6 @@
import type { NextApiRequest, NextApiResponse } from "next"; import type { NextApiRequest, NextApiResponse } from "next";
import { prisma } from "@/lib/api/db"; import { prisma } from "@/lib/api/db";
import readFile from "@/lib/api/storage/readFile"; import readFile from "@/lib/api/storage/readFile";
import verifyUser from "@/lib/api/verifyUser";
import { getToken } from "next-auth/jwt"; import { getToken } from "next-auth/jwt";
export default async function Index(req: NextApiRequest, res: NextApiResponse) { export default async function Index(req: NextApiRequest, res: NextApiResponse) {
@ -16,57 +15,59 @@ export default async function Index(req: NextApiRequest, res: NextApiResponse) {
const token = await getToken({ req }); const token = await getToken({ req });
const userId = token?.id; const userId = token?.id;
const targetUser = await prisma.user.findUnique({ if (req.method === "GET") {
where: { const targetUser = await prisma.user.findUnique({
id: queryId,
},
include: {
whitelistedUsers: true,
},
});
if (targetUser?.isPrivate) {
if (!userId) {
return res
.setHeader("Content-Type", "text/plain")
.status(400)
.send("File inaccessible.");
}
const user = await prisma.user.findUnique({
where: { where: {
id: userId, id: queryId,
}, },
include: { include: {
subscriptions: true, whitelistedUsers: true,
}, },
}); });
const whitelistedUsernames = targetUser?.whitelistedUsers.map( if (targetUser?.isPrivate) {
(whitelistedUsername) => whitelistedUsername.username if (!userId) {
return res
.setHeader("Content-Type", "text/plain")
.status(400)
.send("File inaccessible.");
}
const user = await prisma.user.findUnique({
where: {
id: userId,
},
include: {
subscriptions: true,
},
});
const whitelistedUsernames = targetUser?.whitelistedUsers.map(
(whitelistedUsername) => whitelistedUsername.username
);
if (!user?.username) {
return res
.setHeader("Content-Type", "text/plain")
.status(400)
.send("File inaccessible.");
}
if (user.username && !whitelistedUsernames?.includes(user.username)) {
return res
.setHeader("Content-Type", "text/plain")
.status(400)
.send("File inaccessible.");
}
}
const { file, contentType, status } = await readFile(
`uploads/avatar/${queryId}.jpg`
); );
if (!user?.username) { return res
return res .setHeader("Content-Type", contentType)
.setHeader("Content-Type", "text/plain") .status(status as number)
.status(400) .send(file);
.send("File inaccessible.");
}
if (user.username && !whitelistedUsernames?.includes(user.username)) {
return res
.setHeader("Content-Type", "text/plain")
.status(400)
.send("File inaccessible.");
}
} }
const { file, contentType, status } = await readFile(
`uploads/avatar/${queryId}.jpg`
);
return res
.setHeader("Content-Type", contentType)
.status(status as number)
.send(file);
} }