feat(*): 创作配置 - 支持 Midjourney、多图保存与自定义公告

Co-authored-by: ddcat666 <26564566+ddcat666@users.noreply.github.com>

backend/internal/handler/appearance.go

@@ -4,6 +4,7 @@ import (
 	"net/http"
 	"time"
 
+	"infinite-canvas/backend/internal/model"
 	"infinite-canvas/backend/internal/service"
 
 	"github.com/gin-gonic/gin"
@@ -11,6 +12,27 @@ import (
 
 func RegisterAppearanceRoutes(r *gin.RouterGroup, svc *service.Service) {
 	registerLive2DRoutes(r, svc)
+	serveUpdateMedia := func(admin bool) gin.HandlerFunc {
+		return func(c *gin.Context) {
+			var actor *model.User
+			if admin {
+				var err error
+				actor, err = currentUser(c, svc)
+				if err != nil {
+					failService(c, err)
+					return
+				}
+			}
+			delivery, err := svc.PrepareUpdateAnnouncementDelivery(actor, c.Param("id"), resourceAccessOptions(c), c.GetHeader("Range"))
+			if err != nil {
+				failService(c, err)
+				return
+			}
+			serveResourceDelivery(c, delivery, "private, no-store", "")
+		}
+	}
+	r.GET("/public/appearance/updates/:id", serveUpdateMedia(false))
+	r.GET("/admin/settings/appearance/updates/:id", serveUpdateMedia(true))
 	r.GET("/public/appearance", func(c *gin.Context) {
 		setting, err := svc.Appearance()
 		if err != nil {
@@ -55,7 +77,7 @@ func RegisterAppearanceRoutes(r *gin.RouterGroup, svc *service.Service) {
 			failService(c, err)
 			return
 		}
-		c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 32<<10)
+		c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 512<<10)
 		req := current.AppearanceSetting
 		if err := c.ShouldBindJSON(&req); err != nil {
 			fail(c, http.StatusBadRequest, err)
@@ -100,6 +122,9 @@ func RegisterAppearanceRoutes(r *gin.RouterGroup, svc *service.Service) {
 		}
 		c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, maxBytes+(1<<20))
 		file, err := c.FormFile("file")
+		if c.Request.MultipartForm != nil {
+			defer c.Request.MultipartForm.RemoveAll()
+		}
 		if err != nil {
 			fail(c, http.StatusBadRequest, err)
 			return

backend/internal/handler/appearance_routes_test.go

@@ -1,8 +1,18 @@
 package handler
 
 import (
+	"net/http"
+	"net/http/httptest"
+	"os"
+	"path/filepath"
 	"testing"
 
+	"gorm.io/driver/sqlite"
+	"gorm.io/gorm"
+	"infinite-canvas/backend/internal/app"
+	"infinite-canvas/backend/internal/database"
+	"infinite-canvas/backend/internal/model"
+	"infinite-canvas/backend/internal/repository"
 	"infinite-canvas/backend/internal/service"
 
 	"github.com/gin-gonic/gin"
@@ -13,6 +23,8 @@ func TestAppearanceRoutesAreRegistered(t *testing.T) {
 	router := gin.New()
 	RegisterAppearanceRoutes(router.Group("/api"), &service.Service{})
 	wanted := map[string]bool{
+		"GET /api/public/appearance/updates/:id":              false,
+		"GET /api/admin/settings/appearance/updates/:id":      false,
 		"POST /api/admin/settings/appearance/live2d":          false,
 		"GET /api/admin/settings/appearance/live2d/:id/*file": false,
 		"GET /api/public/appearance/live2d/:id/*file":         false,
@@ -35,3 +47,58 @@ func TestAppearanceRoutesAreRegistered(t *testing.T) {
 		}
 	}
 }
+
+func TestAppearanceUpdateAnnouncementMediaRangeAndDisabledAccess(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	db, err := gorm.Open(sqlite.Open("file:appearance-handler-range?mode=memory&cache=shared"), &gorm.Config{})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := database.MigrateSchema(db); err != nil {
+		t.Fatal(err)
+	}
+	dir := t.TempDir()
+	if err := os.MkdirAll(filepath.Join(dir, "resources"), 0750); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(dir, "resources", "fixture.mp4"), []byte("video-data"), 0640); err != nil {
+		t.Fatal(err)
+	}
+	resource := model.Resource{ID: "fixture-video", UserID: "admin", Kind: "video", Status: model.ResourceStatusReady, Provider: "local", ObjectKey: "fixture.mp4", MimeType: "video/mp4", Size: 10}
+	if err := db.Create(&resource).Error; err != nil {
+		t.Fatal(err)
+	}
+	svc := service.New(repository.New(db), dir)
+	admin := &model.User{ID: "admin", Role: model.UserRoleAdmin, Status: model.UserStatusActive}
+	setting, err := svc.AdminAppearance(admin)
+	if err != nil {
+		t.Fatal(err)
+	}
+	setting.Updates = app.UpdateAnnouncement{Enabled: true, CurrentVersion: "v2", Releases: []app.UpdateRelease{{ID: "r1", Version: "v2", Blocks: []app.UpdateBlock{{ID: "b1", Type: "video", ResourceID: resource.ID, Layout: "full"}}}}}
+	if _, err := svc.UpdateAppearance(admin, setting.AppearanceSetting); err != nil {
+		t.Fatal(err)
+	}
+	router := gin.New()
+	RegisterAppearanceRoutes(router.Group("/api"), svc)
+	req := httptest.NewRequest(http.MethodGet, "/api/public/appearance/updates/fixture-video", nil)
+	req.Header.Set("Range", "bytes=0-3")
+	rec := httptest.NewRecorder()
+	router.ServeHTTP(rec, req)
+	if rec.Code != 206 || rec.Body.String() != "vide" || rec.Header().Get("Content-Range") != "bytes 0-3/10" {
+		t.Fatalf("Range HTTP response: %d %q %v", rec.Code, rec.Body.String(), rec.Header())
+	}
+	preview := httptest.NewRecorder()
+	router.ServeHTTP(preview, httptest.NewRequest(http.MethodGet, "/api/admin/settings/appearance/updates/fixture-video", nil))
+	if preview.Code != 401 {
+		t.Fatalf("anonymous admin preview: %d", preview.Code)
+	}
+	setting.Updates.Enabled = false
+	if _, err := svc.UpdateAppearance(admin, setting.AppearanceSetting); err != nil {
+		t.Fatal(err)
+	}
+	disabled := httptest.NewRecorder()
+	router.ServeHTTP(disabled, req)
+	if disabled.Code != 404 {
+		t.Fatalf("disabled public media: %d", disabled.Code)
+	}
+}