]>
Commit | Line | Data |
---|---|---|
41fb13c3 | 1 | import express from 'express' |
21b5c298 | 2 | import { param } from 'express-validator' |
d4a8e7a6 | 3 | import { isIdValid } from '@server/helpers/custom-validators/misc' |
21b5c298 C |
4 | import { checkUserCanTerminateOwnershipChange } from '@server/helpers/custom-validators/video-ownership' |
5 | import { logger } from '@server/helpers/logger' | |
21b5c298 C |
6 | import { AccountModel } from '@server/models/account/account' |
7 | import { MVideoWithAllFiles } from '@server/types/models' | |
c729caf6 | 8 | import { HttpStatusCode, UserRight, VideoChangeOwnershipAccept, VideoChangeOwnershipStatus, VideoState } from '@shared/models' |
21b5c298 C |
9 | import { |
10 | areValidationErrors, | |
11 | checkUserCanManageVideo, | |
c729caf6 | 12 | checkUserQuota, |
21b5c298 C |
13 | doesChangeVideoOwnershipExist, |
14 | doesVideoChannelOfAccountExist, | |
d4a8e7a6 C |
15 | doesVideoExist, |
16 | isValidVideoIdParam | |
21b5c298 C |
17 | } from '../shared' |
18 | ||
19 | const videosChangeOwnershipValidator = [ | |
d4a8e7a6 | 20 | isValidVideoIdParam('videoId'), |
21b5c298 C |
21 | |
22 | async (req: express.Request, res: express.Response, next: express.NextFunction) => { | |
23 | logger.debug('Checking changeOwnership parameters', { parameters: req.params }) | |
24 | ||
25 | if (areValidationErrors(req, res)) return | |
26 | if (!await doesVideoExist(req.params.videoId, res)) return | |
27 | ||
28 | // Check if the user who did the request is able to change the ownership of the video | |
29 | if (!checkUserCanManageVideo(res.locals.oauth.token.User, res.locals.videoAll, UserRight.CHANGE_VIDEO_OWNERSHIP, res)) return | |
30 | ||
31 | const nextOwner = await AccountModel.loadLocalByName(req.body.username) | |
32 | if (!nextOwner) { | |
33 | res.fail({ message: 'Changing video ownership to a remote account is not supported yet' }) | |
34 | return | |
35 | } | |
36 | ||
37 | res.locals.nextOwner = nextOwner | |
38 | return next() | |
39 | } | |
40 | ] | |
41 | ||
42 | const videosTerminateChangeOwnershipValidator = [ | |
d4a8e7a6 C |
43 | param('id') |
44 | .custom(isIdValid).withMessage('Should have a valid id'), | |
21b5c298 C |
45 | |
46 | async (req: express.Request, res: express.Response, next: express.NextFunction) => { | |
47 | logger.debug('Checking changeOwnership parameters', { parameters: req.params }) | |
48 | ||
49 | if (areValidationErrors(req, res)) return | |
50 | if (!await doesChangeVideoOwnershipExist(req.params.id, res)) return | |
51 | ||
52 | // Check if the user who did the request is able to change the ownership of the video | |
53 | if (!checkUserCanTerminateOwnershipChange(res.locals.oauth.token.User, res.locals.videoChangeOwnership, res)) return | |
54 | ||
55 | const videoChangeOwnership = res.locals.videoChangeOwnership | |
56 | ||
57 | if (videoChangeOwnership.status !== VideoChangeOwnershipStatus.WAITING) { | |
58 | res.fail({ | |
59 | status: HttpStatusCode.FORBIDDEN_403, | |
60 | message: 'Ownership already accepted or refused' | |
61 | }) | |
62 | return | |
63 | } | |
64 | ||
65 | return next() | |
66 | } | |
67 | ] | |
68 | ||
69 | const videosAcceptChangeOwnershipValidator = [ | |
70 | async (req: express.Request, res: express.Response, next: express.NextFunction) => { | |
71 | const body = req.body as VideoChangeOwnershipAccept | |
72 | if (!await doesVideoChannelOfAccountExist(body.channelId, res.locals.oauth.token.User, res)) return | |
73 | ||
74 | const videoChangeOwnership = res.locals.videoChangeOwnership | |
75 | ||
76 | const video = videoChangeOwnership.Video | |
77 | ||
78 | if (!await checkCanAccept(video, res)) return | |
79 | ||
80 | return next() | |
81 | } | |
82 | ] | |
83 | ||
84 | export { | |
85 | videosChangeOwnershipValidator, | |
86 | videosTerminateChangeOwnershipValidator, | |
87 | videosAcceptChangeOwnershipValidator | |
88 | } | |
89 | ||
90 | // --------------------------------------------------------------------------- | |
91 | ||
92 | async function checkCanAccept (video: MVideoWithAllFiles, res: express.Response): Promise<boolean> { | |
93 | if (video.isLive) { | |
94 | ||
95 | if (video.state !== VideoState.WAITING_FOR_LIVE) { | |
96 | res.fail({ | |
97 | status: HttpStatusCode.BAD_REQUEST_400, | |
98 | message: 'You can accept an ownership change of a published live.' | |
99 | }) | |
100 | ||
101 | return false | |
102 | } | |
103 | ||
104 | return true | |
105 | } | |
106 | ||
107 | const user = res.locals.oauth.token.User | |
108 | ||
c729caf6 | 109 | if (!await checkUserQuota(user, video.getMaxQualityFile().size, res)) return false |
21b5c298 C |
110 | |
111 | return true | |
112 | } |