server/middlewares/validators/videos/video-ownership-changes.ts

   1 import express from 'express'
   2 import { param } from 'express-validator'
   3 import { isIdValid } from '@server/helpers/custom-validators/misc'
   4 import { checkUserCanTerminateOwnershipChange } from '@server/helpers/custom-validators/video-ownership'
   5 import { logger } from '@server/helpers/logger'
   6 import { AccountModel } from '@server/models/account/account'
   7 import { MVideoWithAllFiles } from '@server/types/models'
   8 import { HttpStatusCode, UserRight, VideoChangeOwnershipAccept, VideoChangeOwnershipStatus, VideoState } from '@shared/models'
   9 import {
  10   areValidationErrors,
  11   checkUserCanManageVideo,
  12   checkUserQuota,
  13   doesChangeVideoOwnershipExist,
  14   doesVideoChannelOfAccountExist,
  15   doesVideoExist,
  16   isValidVideoIdParam
  17 } from '../shared'
  18
  19 const videosChangeOwnershipValidator = [
  20   isValidVideoIdParam('videoId'),
  21
  22   async (req: express.Request, res: express.Response, next: express.NextFunction) => {
  23     logger.debug('Checking changeOwnership parameters', { parameters: req.params })
  24
  25     if (areValidationErrors(req, res)) return
  26     if (!await doesVideoExist(req.params.videoId, res)) return
  27
  28     // Check if the user who did the request is able to change the ownership of the video
  29     if (!checkUserCanManageVideo(res.locals.oauth.token.User, res.locals.videoAll, UserRight.CHANGE_VIDEO_OWNERSHIP, res)) return
  30
  31     const nextOwner = await AccountModel.loadLocalByName(req.body.username)
  32     if (!nextOwner) {
  33       res.fail({ message: 'Changing video ownership to a remote account is not supported yet' })
  34       return
  35     }
  36
  37     res.locals.nextOwner = nextOwner
  38     return next()
  39   }
  40 ]
  41
  42 const videosTerminateChangeOwnershipValidator = [
  43   param('id')
  44     .custom(isIdValid).withMessage('Should have a valid id'),
  45
  46   async (req: express.Request, res: express.Response, next: express.NextFunction) => {
  47     logger.debug('Checking changeOwnership parameters', { parameters: req.params })
  48
  49     if (areValidationErrors(req, res)) return
  50     if (!await doesChangeVideoOwnershipExist(req.params.id, res)) return
  51
  52     // Check if the user who did the request is able to change the ownership of the video
  53     if (!checkUserCanTerminateOwnershipChange(res.locals.oauth.token.User, res.locals.videoChangeOwnership, res)) return
  54
  55     const videoChangeOwnership = res.locals.videoChangeOwnership
  56
  57     if (videoChangeOwnership.status !== VideoChangeOwnershipStatus.WAITING) {
  58       res.fail({
  59         status: HttpStatusCode.FORBIDDEN_403,
  60         message: 'Ownership already accepted or refused'
  61       })
  62       return
  63     }
  64
  65     return next()
  66   }
  67 ]
  68
  69 const videosAcceptChangeOwnershipValidator = [
  70   async (req: express.Request, res: express.Response, next: express.NextFunction) => {
  71     const body = req.body as VideoChangeOwnershipAccept
  72     if (!await doesVideoChannelOfAccountExist(body.channelId, res.locals.oauth.token.User, res)) return
  73
  74     const videoChangeOwnership = res.locals.videoChangeOwnership
  75
  76     const video = videoChangeOwnership.Video
  77
  78     if (!await checkCanAccept(video, res)) return
  79
  80     return next()
  81   }
  82 ]
  83
  84 export {
  85   videosChangeOwnershipValidator,
  86   videosTerminateChangeOwnershipValidator,
  87   videosAcceptChangeOwnershipValidator
  88 }
  89
  90 // ---------------------------------------------------------------------------
  91
  92 async function checkCanAccept (video: MVideoWithAllFiles, res: express.Response): Promise<boolean> {
  93   if (video.isLive) {
  94
  95     if (video.state !== VideoState.WAITING_FOR_LIVE) {
  96       res.fail({
  97         status: HttpStatusCode.BAD_REQUEST_400,
  98         message: 'You can accept an ownership change of a published live.'
  99       })
 100
 101       return false
 102     }
 103
 104     return true
 105   }
 106
 107   const user = res.locals.oauth.token.User
 108
 109   if (!await checkUserQuota(user, video.getMaxQualityFile().size, res)) return false
 110
 111   return true
 112 }