mirror of
https://github.com/System-End/cdn.git
synced 2026-04-19 16:18:17 +00:00
116 lines
4 KiB
Ruby
116 lines
4 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
module API
|
|
module V4
|
|
class UploadsController < ApplicationController
|
|
before_action :check_quota, only: [ :create, :create_from_url ]
|
|
|
|
# POST /api/v4/upload
|
|
def create
|
|
file = params[:file]
|
|
|
|
unless file.present?
|
|
render json: { error: "Missing file parameter" }, status: :bad_request
|
|
return
|
|
end
|
|
|
|
content_type = Marcel::MimeType.for(file.tempfile, name: file.original_filename) || file.content_type || "application/octet-stream"
|
|
|
|
# Pre-gen upload ID for predictable storage path
|
|
upload_id = SecureRandom.uuid_v7
|
|
sanitized_filename = ActiveStorage::Filename.new(file.original_filename).sanitized
|
|
storage_key = "#{upload_id}/#{sanitized_filename}"
|
|
|
|
blob = ActiveStorage::Blob.create_and_upload!(
|
|
io: file.tempfile,
|
|
filename: file.original_filename,
|
|
content_type: content_type,
|
|
key: storage_key
|
|
)
|
|
|
|
upload = current_user.uploads.create!(id: upload_id, blob: blob, provenance: :api)
|
|
|
|
render json: upload_json(upload), status: :created
|
|
rescue => e
|
|
render json: { error: "Upload failed: #{e.message}" }, status: :unprocessable_entity
|
|
end
|
|
|
|
# POST /api/v4/upload_from_url
|
|
def create_from_url
|
|
url = params[:url]
|
|
|
|
unless url.present?
|
|
render json: { error: "Missing url parameter" }, status: :bad_request
|
|
return
|
|
end
|
|
|
|
download_auth = request.headers["X-Download-Authorization"]
|
|
upload = Upload.create_from_url(url, user: current_user, provenance: :api, original_url: url, authorization: download_auth)
|
|
|
|
# Check quota after download (URL upload size unknown beforehand)
|
|
quota_service = QuotaService.new(current_user)
|
|
unless quota_service.can_upload?(0) # Already uploaded, check if now over quota
|
|
if current_user.total_storage_bytes > quota_service.current_policy.max_total_storage
|
|
upload.destroy!
|
|
usage = quota_service.current_usage
|
|
render json: quota_error_json(usage), status: :payment_required
|
|
return
|
|
end
|
|
end
|
|
|
|
render json: upload_json(upload), status: :created
|
|
rescue => e
|
|
render json: { error: "Upload failed: #{e.message}" }, status: :unprocessable_entity
|
|
end
|
|
|
|
private
|
|
|
|
def check_quota
|
|
# For direct uploads, check file size before processing
|
|
if params[:file].present?
|
|
file_size = params[:file].size
|
|
quota_service = QuotaService.new(current_user)
|
|
policy = quota_service.current_policy
|
|
|
|
# Check per-file size limit
|
|
if file_size > policy.max_file_size
|
|
usage = quota_service.current_usage
|
|
render json: quota_error_json(usage, "File size exceeds your limit of #{ActiveSupport::NumberHelper.number_to_human_size(policy.max_file_size)} per file"), status: :payment_required
|
|
return
|
|
end
|
|
|
|
# Check if upload would exceed total storage quota
|
|
unless quota_service.can_upload?(file_size)
|
|
usage = quota_service.current_usage
|
|
render json: quota_error_json(usage), status: :payment_required
|
|
nil
|
|
end
|
|
end
|
|
# For URL uploads, quota is checked after download in create_from_url
|
|
end
|
|
|
|
def quota_error_json(usage, custom_message = nil)
|
|
{
|
|
error: custom_message || "Storage quota exceeded",
|
|
quota: {
|
|
storage_used: usage[:storage_used],
|
|
storage_limit: usage[:storage_limit],
|
|
quota_tier: usage[:policy],
|
|
percentage_used: usage[:percentage_used]
|
|
}
|
|
}
|
|
end
|
|
|
|
def upload_json(upload)
|
|
{
|
|
id: upload.id,
|
|
filename: upload.filename.to_s,
|
|
size: upload.byte_size,
|
|
content_type: upload.content_type,
|
|
url: upload.cdn_url,
|
|
created_at: upload.created_at.iso8601
|
|
}
|
|
end
|
|
end
|
|
end
|
|
end
|