]>
Commit | Line | Data |
---|---|---|
21b5c298 C |
1 | import * as express from 'express' |
2 | import { param } from 'express-validator' | |
d4a8e7a6 | 3 | import { isIdValid } from '@server/helpers/custom-validators/misc' |
21b5c298 C |
4 | import { checkUserCanTerminateOwnershipChange } from '@server/helpers/custom-validators/video-ownership' |
5 | import { logger } from '@server/helpers/logger' | |
6 | import { isAbleToUploadVideo } from '@server/lib/user' | |
7 | import { AccountModel } from '@server/models/account/account' | |
8 | import { MVideoWithAllFiles } from '@server/types/models' | |
9 | import { HttpStatusCode } from '@shared/core-utils' | |
10 | import { ServerErrorCode, UserRight, VideoChangeOwnershipAccept, VideoChangeOwnershipStatus, VideoState } from '@shared/models' | |
11 | import { | |
12 | areValidationErrors, | |
13 | checkUserCanManageVideo, | |
14 | doesChangeVideoOwnershipExist, | |
15 | doesVideoChannelOfAccountExist, | |
d4a8e7a6 C |
16 | doesVideoExist, |
17 | isValidVideoIdParam | |
21b5c298 C |
18 | } from '../shared' |
19 | ||
20 | const videosChangeOwnershipValidator = [ | |
d4a8e7a6 | 21 | isValidVideoIdParam('videoId'), |
21b5c298 C |
22 | |
23 | async (req: express.Request, res: express.Response, next: express.NextFunction) => { | |
24 | logger.debug('Checking changeOwnership parameters', { parameters: req.params }) | |
25 | ||
26 | if (areValidationErrors(req, res)) return | |
27 | if (!await doesVideoExist(req.params.videoId, res)) return | |
28 | ||
29 | // Check if the user who did the request is able to change the ownership of the video | |
30 | if (!checkUserCanManageVideo(res.locals.oauth.token.User, res.locals.videoAll, UserRight.CHANGE_VIDEO_OWNERSHIP, res)) return | |
31 | ||
32 | const nextOwner = await AccountModel.loadLocalByName(req.body.username) | |
33 | if (!nextOwner) { | |
34 | res.fail({ message: 'Changing video ownership to a remote account is not supported yet' }) | |
35 | return | |
36 | } | |
37 | ||
38 | res.locals.nextOwner = nextOwner | |
39 | return next() | |
40 | } | |
41 | ] | |
42 | ||
43 | const videosTerminateChangeOwnershipValidator = [ | |
d4a8e7a6 C |
44 | param('id') |
45 | .custom(isIdValid).withMessage('Should have a valid id'), | |
21b5c298 C |
46 | |
47 | async (req: express.Request, res: express.Response, next: express.NextFunction) => { | |
48 | logger.debug('Checking changeOwnership parameters', { parameters: req.params }) | |
49 | ||
50 | if (areValidationErrors(req, res)) return | |
51 | if (!await doesChangeVideoOwnershipExist(req.params.id, res)) return | |
52 | ||
53 | // Check if the user who did the request is able to change the ownership of the video | |
54 | if (!checkUserCanTerminateOwnershipChange(res.locals.oauth.token.User, res.locals.videoChangeOwnership, res)) return | |
55 | ||
56 | const videoChangeOwnership = res.locals.videoChangeOwnership | |
57 | ||
58 | if (videoChangeOwnership.status !== VideoChangeOwnershipStatus.WAITING) { | |
59 | res.fail({ | |
60 | status: HttpStatusCode.FORBIDDEN_403, | |
61 | message: 'Ownership already accepted or refused' | |
62 | }) | |
63 | return | |
64 | } | |
65 | ||
66 | return next() | |
67 | } | |
68 | ] | |
69 | ||
70 | const videosAcceptChangeOwnershipValidator = [ | |
71 | async (req: express.Request, res: express.Response, next: express.NextFunction) => { | |
72 | const body = req.body as VideoChangeOwnershipAccept | |
73 | if (!await doesVideoChannelOfAccountExist(body.channelId, res.locals.oauth.token.User, res)) return | |
74 | ||
75 | const videoChangeOwnership = res.locals.videoChangeOwnership | |
76 | ||
77 | const video = videoChangeOwnership.Video | |
78 | ||
79 | if (!await checkCanAccept(video, res)) return | |
80 | ||
81 | return next() | |
82 | } | |
83 | ] | |
84 | ||
85 | export { | |
86 | videosChangeOwnershipValidator, | |
87 | videosTerminateChangeOwnershipValidator, | |
88 | videosAcceptChangeOwnershipValidator | |
89 | } | |
90 | ||
91 | // --------------------------------------------------------------------------- | |
92 | ||
93 | async function checkCanAccept (video: MVideoWithAllFiles, res: express.Response): Promise<boolean> { | |
94 | if (video.isLive) { | |
95 | ||
96 | if (video.state !== VideoState.WAITING_FOR_LIVE) { | |
97 | res.fail({ | |
98 | status: HttpStatusCode.BAD_REQUEST_400, | |
99 | message: 'You can accept an ownership change of a published live.' | |
100 | }) | |
101 | ||
102 | return false | |
103 | } | |
104 | ||
105 | return true | |
106 | } | |
107 | ||
108 | const user = res.locals.oauth.token.User | |
109 | ||
110 | if (!await isAbleToUploadVideo(user.id, video.getMaxQualityFile().size)) { | |
111 | res.fail({ | |
112 | status: HttpStatusCode.PAYLOAD_TOO_LARGE_413, | |
113 | message: 'The user video quota is exceeded with this video.', | |
114 | type: ServerErrorCode.QUOTA_REACHED | |
115 | }) | |
116 | ||
117 | return false | |
118 | } | |
119 | ||
120 | return true | |
121 | } |