mirror of
https://github.com/OpenListTeam/OpenList.git
synced 2025-11-25 11:29:29 +08:00
fdcc2f136e
* Enable blank issue * chore(README.md): update docs (temporally) * Update FUNDING.yml * chore: purge README.md * chore: change module name to OpenListTeam/OpenList * fix: fix link errors * chore: remove v3 in module name * fix: resolve some conficts * fix: resolve conficts * docs: update with latest file --------- Co-authored-by: ShenLin <773933146@qq.com> Co-authored-by: Hantong Chen <cxwdyx620@gmail.com> Co-authored-by: joshua <i@joshua.su> Co-authored-by: Hantong Chen <70561268+cxw620@users.noreply.github.com>
45 lines
1.0 KiB
Go
45 lines
1.0 KiB
Go
package middlewares
|
|
|
|
import (
|
|
"net/url"
|
|
stdpath "path"
|
|
|
|
"github.com/OpenListTeam/OpenList/internal/errs"
|
|
"github.com/OpenListTeam/OpenList/internal/model"
|
|
"github.com/OpenListTeam/OpenList/internal/op"
|
|
"github.com/OpenListTeam/OpenList/server/common"
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/pkg/errors"
|
|
)
|
|
|
|
func FsUp(c *gin.Context) {
|
|
path := c.GetHeader("File-Path")
|
|
password := c.GetHeader("Password")
|
|
path, err := url.PathUnescape(path)
|
|
if err != nil {
|
|
common.ErrorResp(c, err, 400)
|
|
c.Abort()
|
|
return
|
|
}
|
|
user := c.MustGet("user").(*model.User)
|
|
path, err = user.JoinPath(path)
|
|
if err != nil {
|
|
common.ErrorResp(c, err, 403)
|
|
return
|
|
}
|
|
meta, err := op.GetNearestMeta(stdpath.Dir(path))
|
|
if err != nil {
|
|
if !errors.Is(errors.Cause(err), errs.MetaNotFound) {
|
|
common.ErrorResp(c, err, 500, true)
|
|
c.Abort()
|
|
return
|
|
}
|
|
}
|
|
if !(common.CanAccess(user, meta, path, password) && (user.CanWrite() || common.CanWrite(meta, stdpath.Dir(path)))) {
|
|
common.ErrorResp(c, errs.PermissionDenied, 403)
|
|
c.Abort()
|
|
return
|
|
}
|
|
c.Next()
|
|
}
|