src/files.js

   1 'use strict';
   2
   3 var async = require('async'),
   4     fs = require('fs'),
   5     path = require('path'),
   6     rm = require('del'),
   7     debug = require('debug')('files'),
   8     mkdirp = require('mkdirp'),
   9     HttpError = require('connect-lastmile').HttpError,
  10     HttpSuccess = require('connect-lastmile').HttpSuccess;
  11
  12 var gBasePath;
  13
  14 exports = module.exports = function (basePath) {
  15     gBasePath = basePath;
  16
  17     return {
  18         get: get,
  19         put: put,
  20         del: del
  21     };
  22 };
  23
  24 // http://stackoverflow.com/questions/11293857/fastest-way-to-copy-file-in-node-js
  25 function copyFile(source, target, cb) {
  26     var cbCalled = false;
  27
  28     // ensure directory
  29     mkdirp(path.dirname(target), function (error) {
  30         if (error) return cb(error);
  31
  32         var rd = fs.createReadStream(source);
  33             rd.on("error", function(err) {
  34             done(err);
  35         });
  36
  37         var wr = fs.createWriteStream(target);
  38             wr.on("error", function(err) {
  39             done(err);
  40         });
  41
  42         wr.on("close", function(ex) {
  43             done();
  44         });
  45
  46         rd.pipe(wr);
  47
  48         function done(err) {
  49             if (!cbCalled) {
  50                 cb(err);
  51                 cbCalled = true;
  52             }
  53         }
  54     });
  55 }
  56
  57 function createDirectory(targetPath, callback) {
  58     mkdirp(targetPath, function (error) {
  59         if (error) return callback(error);
  60         callback(null);
  61     });
  62 }
  63
  64 function isProtected(targetPath) {
  65     return targetPath.indexOf(getAbsolutePath('_admin')) === 0;
  66 }
  67
  68 function getAbsolutePath(filePath) {
  69     var absoluteFilePath = path.resolve(path.join(gBasePath, filePath));
  70
  71     if (absoluteFilePath.indexOf(gBasePath) !== 0) return null;
  72     return absoluteFilePath;
  73 }
  74
  75 function removeBasePath(filePath) {
  76     return filePath.slice(gBasePath.length);
  77 }
  78
  79 function get(req, res, next) {
  80     var filePath = decodeURIComponent(req.params[0]);
  81     var absoluteFilePath = getAbsolutePath(filePath);
  82     if (!absoluteFilePath) return next(new HttpError(403, 'Path not allowed'));
  83
  84     fs.stat(absoluteFilePath, function (error, result) {
  85         if (error) return next(new HttpError(404, error));
  86
  87         debug('get', absoluteFilePath);
  88
  89         if (!result.isDirectory() && !result.isFile()) return next(new HttpError(500, 'unsupported type'));
  90         if (result.isFile()) return res.sendFile(absoluteFilePath);
  91
  92         async.map(fs.readdirSync(absoluteFilePath), function (filePath, callback) {
  93             fs.stat(path.join(absoluteFilePath, filePath), function (error, result) {
  94                 if (error) return callback(error);
  95
  96                 callback(null, {
  97                     isDirectory: result.isDirectory(),
  98                     isFile: result.isFile(),
  99                     atime: result.atime,
 100                     mtime: result.mtime,
 101                     ctime: result.ctime,
 102                     birthtime: result.birthtime,
 103                     size: result.size,
 104                     filePath: filePath
 105                 });
 106             });
 107         }, function (error, results) {
 108             if (error) return next(new HttpError(500, error));
 109             res.status(222).send({ entries: results });
 110         });
 111     });
 112 }
 113
 114 function put(req, res, next) {
 115     var filePath = decodeURIComponent(req.params[0]);
 116
 117     if (!(req.files && req.files.file) && !req.query.directory) return next(new HttpError(400, 'missing file or directory'));
 118     if ((req.files && req.files.file) && req.query.directory) return next(new HttpError(400, 'either file or directory'));
 119
 120     var absoluteFilePath = getAbsolutePath(filePath);
 121     if (!absoluteFilePath || isProtected(absoluteFilePath)) return next(new HttpError(403, 'Path not allowed'));
 122
 123     fs.stat(absoluteFilePath, function (error, result) {
 124         if (error && error.code !== 'ENOENT') return next(new HttpError(500, error));
 125
 126         debug('put', absoluteFilePath);
 127
 128         if (result && req.query.directory) return next(new HttpError(409, 'name already exists'));
 129         if (result && result.isDirectory()) return next(new HttpError(409, 'cannot put on directories'));
 130
 131         if (req.query.directory) {
 132             return createDirectory(absoluteFilePath, function (error) {
 133                 if (error) return next(new HttpError(500, error));
 134                 next(new HttpSuccess(201, {}));
 135             });
 136         } else if (!result || result.isFile()) {
 137             return copyFile(req.files.file.path, absoluteFilePath, function (error) {
 138                 if (error) return next(new HttpError(500, error));
 139                 next(new HttpSuccess(201, {}));
 140             });
 141         }
 142
 143         return next(new HttpError(500, 'unsupported type'));
 144     });
 145 }
 146
 147 function del(req, res, next) {
 148     var filePath = decodeURIComponent(req.params[0]);
 149     var recursive = !!req.query.recursive;
 150     var dryRun = !!req.query.dryRun;
 151
 152     var absoluteFilePath = getAbsolutePath(filePath);
 153     if (!absoluteFilePath) return next(new HttpError(404, 'Not found'));
 154
 155     if (isProtected(absoluteFilePath)) return next(new HttpError(403, 'Path not allowed'));
 156
 157     // absoltueFilePath has to have the base path prepended
 158     if (absoluteFilePath.length <= gBasePath.length) return next(new HttpError(404, 'Not found'));
 159
 160     fs.stat(absoluteFilePath, function (error, result) {
 161         if (error) return next(new HttpError(404, error));
 162
 163         if (result.isDirectory() && !recursive) return next(new HttpError(403, 'Is directory'));
 164
 165         // add globs to get file listing
 166         if (result.isDirectory()) absoluteFilePath += '/**';
 167
 168         rm(absoluteFilePath, { dryRun: dryRun, force: true }).then(function (result) {
 169             result = result.map(removeBasePath);
 170             next(new HttpSuccess(200, { entries: result }));
 171         }, function (error) {
 172             console.error(error);
 173             next(new HttpError(500, 'Unable to remove'));
 174         });
 175     });
 176 }