use std::str::FromStr; use actix_files::NamedFile; use actix_web::{ error, http::header::{Charset, ContentDisposition, DispositionParam, DispositionType, ExtendedValue}, web, Error, HttpRequest, HttpResponse, }; use async_std::{fs, path::Path}; use mime::Mime; use sqlx::postgres::PgPool; use url::Url; use crate::deleter; use crate::{config::Config, file_kind::FileKind}; const TEXT_VIEW_HTML: &str = include_str!("../template/text-view.html"); const URL_VIEW_HTML: &str = include_str!("../template/url-view.html"); pub async fn download( req: HttpRequest, db: web::Data, config: web::Data, ) -> Result { let id = req.match_info().query("id"); let (file_id, file_name, file_kind, delete_on_download) = load_file_info(id, &db).await?; let mut path = config.files_dir.clone(); path.push(&file_id); let download = delete_on_download || req.query_string().contains("dl"); let content_type = get_content_type(&path); let is_text = file_kind == FileKind::Text.to_string() || content_type.type_() == mime::TEXT; let response = if is_text && !download { build_text_response(&path).await } else { build_file_response(download, &file_name, path, content_type, req) }; if delete_on_download { deleter::delete_by_id(&db, &file_id, &config.files_dir) .await .map_err(|db_err| { log::error!("could not delete file {:?}", db_err); error::ErrorInternalServerError("could not delete file") })?; } response } async fn load_file_info( id: &str, db: &web::Data>, ) -> Result<(String, String, String, bool), Error> { sqlx::query_as( "SELECT file_id, file_name, kind, delete_on_download from files WHERE file_id = $1", ) .bind(id) .fetch_optional(db.as_ref()) .await .map_err(|db_err| { log::error!("could not run select statement {:?}", db_err); error::ErrorInternalServerError("could not run select statement") })? .ok_or_else(|| error::ErrorNotFound("file does not exist or has expired")) } fn get_content_type(path: &Path) -> Mime { let std_path = std::path::Path::new(path.as_os_str()); tree_magic_mini::from_filepath(std_path) .unwrap_or("application/octet-stream") .parse::() .expect("tree_magic_mini should not produce invalid mime") } async fn build_text_response(path: &Path) -> Result { let content = fs::read_to_string(path).await.map_err(|file_err| { log::error!("file could not be read {:?}", file_err); error::ErrorInternalServerError("this file should be here but could not be found") })?; let encoded = htmlescape::encode_minimal(&content); let html = if !content.contains(&['\n', '\r'][..]) && Url::from_str(&content).is_ok() { let attribute_encoded = htmlescape::encode_attribute(&content); URL_VIEW_HTML .replace("{link_content}", &encoded) .replace("{link_attribute}", &attribute_encoded) } else { TEXT_VIEW_HTML.replace("{text}", &encoded) }; let response = HttpResponse::Ok().content_type("text/html").body(html); Ok(response) } fn build_file_response( download: bool, file_name: &str, path: async_std::path::PathBuf, content_type: Mime, req: HttpRequest, ) -> Result { let content_disposition = ContentDisposition { disposition: if download { DispositionType::Attachment } else { DispositionType::Inline }, parameters: get_disposition_params(file_name), }; let file = NamedFile::open(path) .map_err(|file_err| { log::error!("file could not be read {:?}", file_err); error::ErrorInternalServerError("this file should be here but could not be found") })? .set_content_type(content_type) .set_content_disposition(content_disposition); file.into_response(&req) } fn get_disposition_params(filename: &str) -> Vec { let mut parameters = vec![DispositionParam::Filename(filename.to_owned())]; if !filename.is_ascii() { parameters.push(DispositionParam::FilenameExt(ExtendedValue { charset: Charset::Ext(String::from("UTF-8")), language_tag: None, value: filename.to_owned().into_bytes(), })) } parameters }