73 lines
1.9 KiB
Go
73 lines
1.9 KiB
Go
package handler
|
|
|
|
import (
|
|
"net/http"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"yingce/backend/internal/model"
|
|
"yingce/backend/internal/service"
|
|
)
|
|
|
|
func registerLive2DRoutes(r *gin.RouterGroup, svc *service.Service) {
|
|
r.POST("/admin/settings/appearance/live2d", func(c *gin.Context) {
|
|
actor, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
if err := svc.RequireAdmin(actor); err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
policy, available := loadRuntimePolicy(c, svc)
|
|
if !available || !enforceRateLimit(c, "admin-live2d-upload:"+actor.ID, policy.Request.ResourceUploadPerMinute, time.Minute) {
|
|
return
|
|
}
|
|
c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, service.Live2DMaxBytes+(1<<20))
|
|
file, err := c.FormFile("file")
|
|
if c.Request.MultipartForm != nil {
|
|
defer c.Request.MultipartForm.RemoveAll()
|
|
}
|
|
if err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
result, err := svc.UploadLive2D(actor, file)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"model": result})
|
|
})
|
|
serve := func(admin bool) gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
var actor *model.User
|
|
if admin {
|
|
var err error
|
|
actor, err = currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
if err := svc.RequireAdmin(actor); err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
}
|
|
data, mime, err := svc.Live2DAsset(actor, c.Param("id"), strings.TrimPrefix(c.Param("file"), "/"))
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
c.Header("X-Content-Type-Options", "nosniff")
|
|
c.Header("Cache-Control", "private, no-cache")
|
|
c.Header("Content-Security-Policy", "default-src 'none'")
|
|
c.Data(http.StatusOK, mime, data)
|
|
}
|
|
}
|
|
r.GET("/public/appearance/live2d/:id/*file", serve(false))
|
|
r.GET("/admin/settings/appearance/live2d/:id/*file", serve(true))
|
|
}
|