Plume/src/routes/medias.rs

use guid_create::GUID;
use multipart::server::{Multipart, save::{SavedData, SaveResult}};
use rocket::{Data, http::ContentType, response::{Redirect, status}};
use rocket_i18n::I18n;
use std::fs;
use plume_models::{Error, db_conn::DbConn, medias::*, users::User};
use template_utils::Ructe;
use routes::{Page, errors::ErrorPage};

#[get("/medias?<page>")]
pub fn list(user: User, conn: DbConn, intl: I18n, page: Option<Page>) -> Result<Ructe, ErrorPage> {
    let page = page.unwrap_or_default();
    let medias = Media::page_for_user(&*conn, &user, page.limits())?;
    Ok(render!(medias::index(
        &(&*conn, &intl.catalog, Some(user.clone())),
        medias,
        page.0,
        Page::total(Media::count_for_user(&*conn, &user)? as i32)
    )))
}

#[get("/medias/new")]
pub fn new(user: User, conn: DbConn, intl: I18n) -> Ructe {
    render!(medias::new(
        &(&*conn, &intl.catalog, Some(user))
    ))
}

#[post("/medias/new", data = "<data>")]
pub fn upload(user: User, data: Data, ct: &ContentType, conn: DbConn) -> Result<Redirect, status::BadRequest<&'static str>> {
    if ct.is_form_data() {
        let (_, boundary) = ct.params().find(|&(k, _)| k == "boundary").ok_or_else(|| status::BadRequest(Some("No boundary")))?;

        match Multipart::with_body(data.open(), boundary).save().temp() {
            SaveResult::Full(entries) => {
                let fields = entries.fields;

                let filename = fields.get("file").and_then(|v| v.into_iter().next())
                    .ok_or_else(|| status::BadRequest(Some("No file uploaded")))?.headers
                    .filename.clone();
                // Remove extension if it contains something else than just letters and numbers
                let ext = filename
                    .and_then(|f| f
                        .rsplit('.')
                        .next()
                        .and_then(|ext| if ext.chars().any(|c| !c.is_alphanumeric()) {
                            None
                        } else {
                            Some(ext.to_lowercase())
                        })
                        .map(|ext| format!(".{}", ext))
                    ).unwrap_or_default();
                let dest = format!("static/media/{}{}", GUID::rand().to_string(), ext);

                match fields["file"][0].data {
                    SavedData::Bytes(ref bytes) => fs::write(&dest, bytes).map_err(|_| status::BadRequest(Some("Couldn't save upload")))?,
                    SavedData::File(ref path, _) => {fs::copy(path, &dest).map_err(|_| status::BadRequest(Some("Couldn't copy upload")))?;},
                    _ => {
                        return Ok(Redirect::to(uri!(new)));
                    }
                }

                let has_cw = !read(&fields["cw"][0].data).map(|cw| cw.is_empty()).unwrap_or(false);
                let media = Media::insert(&*conn, NewMedia {
                    file_path: dest,
                    alt_text: read(&fields["alt"][0].data)?,
                    is_remote: false,
                    remote_url: None,
                    sensitive: has_cw,
                    content_warning: if has_cw {
                        Some(read(&fields["cw"][0].data)?)
                    } else {
                        None
                    },
                    owner_id: user.id
                }).map_err(|_| status::BadRequest(Some("Error while saving media")))?;
                Ok(Redirect::to(uri!(details: id = media.id)))
            },
            SaveResult::Partial(_, _) | SaveResult::Error(_) => {
                Ok(Redirect::to(uri!(new)))
            }
        }
    } else {
        Ok(Redirect::to(uri!(new)))
    }
}

fn read(data: &SavedData) -> Result<String, status::BadRequest<&'static str>> {
    if let SavedData::Text(s) = data {
        Ok(s.clone())
    } else {
        Err(status::BadRequest(Some("Error while reading data")))
    }
}

#[get("/medias/<id>")]
pub fn details(id: i32, user: User, conn: DbConn, intl: I18n) -> Result<Ructe, ErrorPage> {
    let media = Media::get(&*conn, id)?;
    if media.owner_id == user.id {
        Ok(render!(medias::details(
            &(&*conn, &intl.catalog, Some(user)),
            media
        )))
    } else {
        Err(Error::Unauthorized.into())
    }
}

#[post("/medias/<id>/delete")]
pub fn delete(id: i32, user: User, conn: DbConn) -> Result<Redirect, ErrorPage> {
    let media = Media::get(&*conn, id)?;
    if media.owner_id == user.id {
        media.delete(&*conn)?;
    }
    Ok(Redirect::to(uri!(list: page = _)))
}

#[post("/medias/<id>/avatar")]
pub fn set_avatar(id: i32, user: User, conn: DbConn) -> Result<Redirect, ErrorPage> {
    let media = Media::get(&*conn, id)?;
    if media.owner_id == user.id {
        user.set_avatar(&*conn, media.id)?;
    }
    Ok(Redirect::to(uri!(details: id = id)))
}