mirror of
https://github.com/thiloho/archtika.git
synced 2025-11-22 10:51:36 +01:00
77 lines
2.7 KiB
MySQL
77 lines
2.7 KiB
MySQL
|
-- migrate:up
|
||
|
|
CREATE OR REPLACE FUNCTION api.upload_file (BYTEA, OUT file_id UUID)
|
||
|
|
AS $$
|
||
|
|
DECLARE
|
||
|
|
_headers JSON := CURRENT_SETTING('request.headers', TRUE)::JSON;
|
||
|
|
_website_id UUID := (_headers ->> 'x-website-id')::UUID;
|
||
|
|
_mimetype TEXT := _headers ->> 'x-mimetype';
|
||
|
|
_original_filename TEXT := _headers ->> 'x-original-filename';
|
||
|
|
_allowed_mimetypes TEXT[] := ARRAY['image/png', 'image/jpeg', 'image/webp'];
|
||
|
|
_max_file_size INT := 5 * 1024 * 1024;
|
||
|
|
_has_access BOOLEAN;
|
||
|
|
BEGIN
|
||
|
|
_has_access = internal.user_has_website_access (_website_id, 20);
|
||
|
|
IF OCTET_LENGTH($1) = 0 THEN
|
||
|
|
RAISE invalid_parameter_value
|
||
|
|
USING message = 'No file data was provided';
|
||
|
|
END IF;
|
||
|
|
IF _mimetype IS NULL OR _mimetype NOT IN (
|
||
|
|
SELECT
|
||
|
|
UNNEST(_allowed_mimetypes)) THEN
|
||
|
|
RAISE invalid_parameter_value
|
||
|
|
USING message = 'Invalid MIME type. Allowed types are: png, jpg, webp';
|
||
|
|
END IF;
|
||
|
|
IF OCTET_LENGTH($1) > _max_file_size THEN
|
||
|
|
RAISE program_limit_exceeded
|
||
|
|
USING message = FORMAT('File size exceeds the maximum limit of %s MB', _max_file_size / (1024 * 1024));
|
||
|
|
END IF;
|
||
|
|
INSERT INTO internal.media (website_id, blob, mimetype, original_name)
|
||
|
|
VALUES (_website_id, $1, _mimetype, _original_filename)
|
||
|
|
RETURNING
|
||
|
|
id INTO file_id;
|
||
|
|
END;
|
||
|
|
$$
|
||
|
|
LANGUAGE plpgsql
|
||
|
|
SECURITY DEFINER;
|
||
|
|
|
||
|
|
GRANT EXECUTE ON FUNCTION api.upload_file (BYTEA) TO authenticated_user;
|
||
|
|
|
||
|
|
-- migrate:down
|
||
|
|
DROP FUNCTION api.upload_file (BYTEA);
|
||
|
|
|
||
|
|
CREATE FUNCTION api.upload_file (BYTEA, OUT file_id UUID)
|
||
|
|
AS $$
|
||
|
|
DECLARE
|
||
|
|
_headers JSON := CURRENT_SETTING('request.headers', TRUE)::JSON;
|
||
|
|
_website_id UUID := (_headers ->> 'x-website-id')::UUID;
|
||
|
|
_mimetype TEXT := _headers ->> 'x-mimetype';
|
||
|
|
_original_filename TEXT := _headers ->> 'x-original-filename';
|
||
|
|
_allowed_mimetypes TEXT[] := ARRAY['image/png', 'image/jpeg', 'image/webp'];
|
||
|
|
_max_file_size INT := 5 * 1024 * 1024;
|
||
|
|
BEGIN
|
||
|
|
IF OCTET_LENGTH($1) = 0 THEN
|
||
|
|
RAISE invalid_parameter_value
|
||
|
|
USING message = 'No file data was provided';
|
||
|
|
END IF;
|
||
|
|
IF _mimetype IS NULL OR _mimetype NOT IN (
|
||
|
|
SELECT
|
||
|
|
UNNEST(_allowed_mimetypes)) THEN
|
||
|
|
RAISE invalid_parameter_value
|
||
|
|
USING message = 'Invalid MIME type. Allowed types are: png, jpg, webp';
|
||
|
|
END IF;
|
||
|
|
IF OCTET_LENGTH($1) > _max_file_size THEN
|
||
|
|
RAISE program_limit_exceeded
|
||
|
|
USING message = FORMAT('File size exceeds the maximum limit of %s MB', _max_file_size / (1024 * 1024));
|
||
|
|
END IF;
|
||
|
|
INSERT INTO internal.media (website_id, blob, mimetype, original_name)
|
||
|
|
VALUES (_website_id, $1, _mimetype, _original_filename)
|
||
|
|
RETURNING
|
||
|
|
id INTO file_id;
|
||
|
|
END;
|
||
|
|
$$
|
||
|
|
LANGUAGE plpgsql
|
||
|
|
SECURITY DEFINER;
|
||
|
|
|
||
|
|
GRANT EXECUTE ON FUNCTION api.upload_file (BYTEA) TO authenticated_user;
|
||
|
|
|