]>
Commit | Line | Data |
---|---|---|
1 | import { Response } from 'express' | |
2 | import 'express-validator' | |
3 | import { values } from 'lodash' | |
4 | import 'multer' | |
5 | import * as validator from 'validator' | |
6 | import { UserRight, VideoPrivacy, VideoRateType } from '../../../shared' | |
7 | import { | |
8 | CONSTRAINTS_FIELDS, | |
9 | VIDEO_CATEGORIES, | |
10 | VIDEO_LICENCES, | |
11 | VIDEO_MIMETYPE_EXT, | |
12 | VIDEO_PRIVACIES, | |
13 | VIDEO_RATE_TYPES, | |
14 | VIDEO_STATES | |
15 | } from '../../initializers' | |
16 | import { VideoModel } from '../../models/video/video' | |
17 | import { exists, isArray, isFileValid } from './misc' | |
18 | import { VideoChannelModel } from '../../models/video/video-channel' | |
19 | import { UserModel } from '../../models/account/user' | |
20 | import * as magnetUtil from 'magnet-uri' | |
21 | ||
22 | const VIDEOS_CONSTRAINTS_FIELDS = CONSTRAINTS_FIELDS.VIDEOS | |
23 | ||
24 | function isVideoCategoryValid (value: any) { | |
25 | return value === null || VIDEO_CATEGORIES[ value ] !== undefined | |
26 | } | |
27 | ||
28 | function isVideoStateValid (value: any) { | |
29 | return exists(value) && VIDEO_STATES[ value ] !== undefined | |
30 | } | |
31 | ||
32 | function isVideoLicenceValid (value: any) { | |
33 | return value === null || VIDEO_LICENCES[ value ] !== undefined | |
34 | } | |
35 | ||
36 | function isVideoLanguageValid (value: any) { | |
37 | return value === null || | |
38 | (typeof value === 'string' && validator.isLength(value, VIDEOS_CONSTRAINTS_FIELDS.LANGUAGE)) | |
39 | } | |
40 | ||
41 | function isVideoDurationValid (value: string) { | |
42 | return exists(value) && validator.isInt(value + '', VIDEOS_CONSTRAINTS_FIELDS.DURATION) | |
43 | } | |
44 | ||
45 | function isVideoTruncatedDescriptionValid (value: string) { | |
46 | return exists(value) && validator.isLength(value, VIDEOS_CONSTRAINTS_FIELDS.TRUNCATED_DESCRIPTION) | |
47 | } | |
48 | ||
49 | function isVideoDescriptionValid (value: string) { | |
50 | return value === null || (exists(value) && validator.isLength(value, VIDEOS_CONSTRAINTS_FIELDS.DESCRIPTION)) | |
51 | } | |
52 | ||
53 | function isVideoSupportValid (value: string) { | |
54 | return value === null || (exists(value) && validator.isLength(value, VIDEOS_CONSTRAINTS_FIELDS.SUPPORT)) | |
55 | } | |
56 | ||
57 | function isVideoNameValid (value: string) { | |
58 | return exists(value) && validator.isLength(value, VIDEOS_CONSTRAINTS_FIELDS.NAME) | |
59 | } | |
60 | ||
61 | function isVideoTagValid (tag: string) { | |
62 | return exists(tag) && validator.isLength(tag, VIDEOS_CONSTRAINTS_FIELDS.TAG) | |
63 | } | |
64 | ||
65 | function isVideoTagsValid (tags: string[]) { | |
66 | return tags === null || ( | |
67 | isArray(tags) && | |
68 | validator.isInt(tags.length.toString(), VIDEOS_CONSTRAINTS_FIELDS.TAGS) && | |
69 | tags.every(tag => isVideoTagValid(tag)) | |
70 | ) | |
71 | } | |
72 | ||
73 | function isVideoViewsValid (value: string) { | |
74 | return exists(value) && validator.isInt(value + '', VIDEOS_CONSTRAINTS_FIELDS.VIEWS) | |
75 | } | |
76 | ||
77 | function isVideoRatingTypeValid (value: string) { | |
78 | return value === 'none' || values(VIDEO_RATE_TYPES).indexOf(value as VideoRateType) !== -1 | |
79 | } | |
80 | ||
81 | const videoFileTypes = Object.keys(VIDEO_MIMETYPE_EXT).map(m => `(${m})`) | |
82 | const videoFileTypesRegex = videoFileTypes.join('|') | |
83 | ||
84 | function isVideoFile (files: { [ fieldname: string ]: Express.Multer.File[] } | Express.Multer.File[]) { | |
85 | return isFileValid(files, videoFileTypesRegex, 'videofile', null) | |
86 | } | |
87 | ||
88 | const videoImageTypes = CONSTRAINTS_FIELDS.VIDEOS.IMAGE.EXTNAME | |
89 | .map(v => v.replace('.', '')) | |
90 | .join('|') | |
91 | const videoImageTypesRegex = `image/(${videoImageTypes})` | |
92 | ||
93 | function isVideoImage (files: { [ fieldname: string ]: Express.Multer.File[] } | Express.Multer.File[], field: string) { | |
94 | return isFileValid(files, videoImageTypesRegex, field, CONSTRAINTS_FIELDS.VIDEOS.IMAGE.FILE_SIZE.max, true) | |
95 | } | |
96 | ||
97 | function isVideoPrivacyValid (value: number) { | |
98 | return validator.isInt(value + '') && VIDEO_PRIVACIES[ value ] !== undefined | |
99 | } | |
100 | ||
101 | function isScheduleVideoUpdatePrivacyValid (value: number) { | |
102 | return validator.isInt(value + '') && | |
103 | ( | |
104 | value === VideoPrivacy.UNLISTED || | |
105 | value === VideoPrivacy.PUBLIC | |
106 | ) | |
107 | } | |
108 | ||
109 | function isVideoFileInfoHashValid (value: string | null | undefined) { | |
110 | return exists(value) && validator.isLength(value, VIDEOS_CONSTRAINTS_FIELDS.INFO_HASH) | |
111 | } | |
112 | ||
113 | function isVideoFileResolutionValid (value: string) { | |
114 | return exists(value) && validator.isInt(value + '') | |
115 | } | |
116 | ||
117 | function isVideoFPSResolutionValid (value: string) { | |
118 | return value === null || validator.isInt(value + '') | |
119 | } | |
120 | ||
121 | function isVideoFileSizeValid (value: string) { | |
122 | return exists(value) && validator.isInt(value + '', VIDEOS_CONSTRAINTS_FIELDS.FILE_SIZE) | |
123 | } | |
124 | ||
125 | function isVideoMagnetUriValid (value: string) { | |
126 | if (!exists(value)) return false | |
127 | ||
128 | const parsed = magnetUtil.decode(value) | |
129 | return parsed && isVideoFileInfoHashValid(parsed.infoHash) | |
130 | } | |
131 | ||
132 | function checkUserCanManageVideo (user: UserModel, video: VideoModel, right: UserRight, res: Response) { | |
133 | // Retrieve the user who did the request | |
134 | if (video.isOwned() === false) { | |
135 | res.status(403) | |
136 | .json({ error: 'Cannot manage a video of another server.' }) | |
137 | .end() | |
138 | return false | |
139 | } | |
140 | ||
141 | // Check if the user can delete the video | |
142 | // The user can delete it if he has the right | |
143 | // Or if s/he is the video's account | |
144 | const account = video.VideoChannel.Account | |
145 | if (user.hasRight(right) === false && account.userId !== user.id) { | |
146 | res.status(403) | |
147 | .json({ error: 'Cannot manage a video of another user.' }) | |
148 | .end() | |
149 | return false | |
150 | } | |
151 | ||
152 | return true | |
153 | } | |
154 | ||
155 | async function isVideoExist (id: string, res: Response) { | |
156 | let video: VideoModel | null | |
157 | ||
158 | if (validator.isInt(id)) { | |
159 | video = await VideoModel.loadAndPopulateAccountAndServerAndTags(+id) | |
160 | } else { // UUID | |
161 | video = await VideoModel.loadByUUIDAndPopulateAccountAndServerAndTags(id) | |
162 | } | |
163 | ||
164 | if (video === null) { | |
165 | res.status(404) | |
166 | .json({ error: 'Video not found' }) | |
167 | .end() | |
168 | ||
169 | return false | |
170 | } | |
171 | ||
172 | res.locals.video = video | |
173 | return true | |
174 | } | |
175 | ||
176 | async function isVideoChannelOfAccountExist (channelId: number, user: UserModel, res: Response) { | |
177 | if (user.hasRight(UserRight.UPDATE_ANY_VIDEO) === true) { | |
178 | const videoChannel = await VideoChannelModel.loadAndPopulateAccount(channelId) | |
179 | if (videoChannel === null) { | |
180 | res.status(400) | |
181 | .json({ error: 'Unknown video video channel on this instance.' }) | |
182 | .end() | |
183 | ||
184 | return false | |
185 | } | |
186 | ||
187 | res.locals.videoChannel = videoChannel | |
188 | return true | |
189 | } | |
190 | ||
191 | const videoChannel = await VideoChannelModel.loadByIdAndAccount(channelId, user.Account.id) | |
192 | if (videoChannel === null) { | |
193 | res.status(400) | |
194 | .json({ error: 'Unknown video video channel for this account.' }) | |
195 | .end() | |
196 | ||
197 | return false | |
198 | } | |
199 | ||
200 | res.locals.videoChannel = videoChannel | |
201 | return true | |
202 | } | |
203 | ||
204 | // --------------------------------------------------------------------------- | |
205 | ||
206 | export { | |
207 | isVideoCategoryValid, | |
208 | checkUserCanManageVideo, | |
209 | isVideoLicenceValid, | |
210 | isVideoLanguageValid, | |
211 | isVideoTruncatedDescriptionValid, | |
212 | isVideoDescriptionValid, | |
213 | isVideoFileInfoHashValid, | |
214 | isVideoNameValid, | |
215 | isVideoTagsValid, | |
216 | isVideoFPSResolutionValid, | |
217 | isScheduleVideoUpdatePrivacyValid, | |
218 | isVideoFile, | |
219 | isVideoMagnetUriValid, | |
220 | isVideoStateValid, | |
221 | isVideoViewsValid, | |
222 | isVideoRatingTypeValid, | |
223 | isVideoDurationValid, | |
224 | isVideoTagValid, | |
225 | isVideoPrivacyValid, | |
226 | isVideoFileResolutionValid, | |
227 | isVideoFileSizeValid, | |
228 | isVideoExist, | |
229 | isVideoImage, | |
230 | isVideoChannelOfAccountExist, | |
231 | isVideoSupportValid | |
232 | } |