mirror of
https://github.com/hanzo-apps/dataroom.git
synced 2026-10-30 14:47:36 +00:00
zeekayandHanzo Dev
23a1657d2e
features/storage/ was Papermark's ee/features/storage — commercial-licensed
code that commit 98f0da7fa renamed out of ee/ byte-identical rather than
deleting, leaving it under our AGPL root licence. Deleted and rewritten.
lib/storage/config.ts resolves one bucket from the environment. The upstream
version carried a hardcoded EU/US region matrix selected by the `usStorage`
feature flag; that flag is served by @vercel/edge-config, is false whenever
EDGE_CONFIG is unset, and no per-document region is persisted anywhere in the
schema — so the second region was unreachable on our deployments. Required
vars now throw at the boundary instead of resolving a partial config.
lib/storage/tus-store.ts builds a plain S3Store. MultiRegionS3Store subclassed
it and reassigned this.client/this.bucket per request on a shared instance, so
two concurrent uploads from different teams could observe each other's bucket.
Construction-time config removes the race. It also now forwards the endpoint,
so resumable uploads reach S3-compatible backends.
lib/files/aws-client.ts collapses to two functions: with one config the
team/non-team split was duplication, and getS3Client, getS3ClientForTeam and
getLambdaClient had no callers outside the module.
LICENSE: drop the carve-out clause pointing at ee/LICENSE and app/(ee) —
both directories are gone, so the pointer dangled. Papermark's copyright
line and the AGPL-3.0 text are untouched.
Co-authored-by: Hanzo Dev <[email protected]>
93 lines
2.7 KiB
TypeScript
93 lines
2.7 KiB
TypeScript
import { NextApiRequest, NextApiResponse } from "next";
|
|
|
|
import { GetObjectCommand } from "@aws-sdk/client-s3";
|
|
import { getSignedUrl as getCloudfrontSignedUrl } from "@aws-sdk/cloudfront-signer";
|
|
import { getSignedUrl as getS3SignedUrl } from "@aws-sdk/s3-request-presigner";
|
|
|
|
import { ONE_HOUR, ONE_SECOND } from "@/lib/constants";
|
|
import { getS3ClientAndConfig } from "@/lib/files/aws-client";
|
|
import { log } from "@/lib/utils";
|
|
|
|
export default async function handler(
|
|
req: NextApiRequest,
|
|
res: NextApiResponse,
|
|
) {
|
|
if (req.method !== "POST") {
|
|
return res.status(405).end("Method Not Allowed");
|
|
}
|
|
|
|
// Extract the API Key from the Authorization header
|
|
const authHeader = req.headers.authorization;
|
|
if (!authHeader || !authHeader.startsWith("Bearer ")) {
|
|
return res.status(401).json({ message: "Unauthorized" });
|
|
}
|
|
const token = authHeader.split(" ")[1]; // Assuming the format is "Bearer [token]"
|
|
|
|
if (!token) {
|
|
return res.status(401).json({ message: "Unauthorized" });
|
|
}
|
|
|
|
// Check if the API Key matches
|
|
if (!process.env.INTERNAL_API_KEY) {
|
|
log({
|
|
message: "INTERNAL_API_KEY environment variable is not set",
|
|
type: "error",
|
|
});
|
|
return res.status(500).json({ message: "Server configuration error" });
|
|
}
|
|
if (token !== process.env.INTERNAL_API_KEY) {
|
|
return res.status(401).json({ message: "Unauthorized" });
|
|
}
|
|
|
|
const { key } = req.body as { key: string };
|
|
|
|
try {
|
|
// Extract teamId from key (format: teamId/docId/filename)
|
|
const teamId = key.split("/")[0];
|
|
if (!teamId) {
|
|
log({
|
|
message: `Invalid key format: ${key}`,
|
|
type: "error",
|
|
});
|
|
return res.status(400).json({ error: "Invalid key format" });
|
|
}
|
|
|
|
const { client, config } = getS3ClientAndConfig();
|
|
|
|
if (config.distributionHost) {
|
|
const distributionUrl = new URL(
|
|
key,
|
|
`https://${config.distributionHost}`,
|
|
);
|
|
|
|
const url = getCloudfrontSignedUrl({
|
|
url: distributionUrl.toString(),
|
|
keyPairId: `${config.distributionKeyId}`,
|
|
privateKey: `${config.distributionKeyContents}`,
|
|
dateLessThan: new Date(Date.now() + ONE_HOUR).toISOString(),
|
|
});
|
|
|
|
return res.status(200).json({ url });
|
|
}
|
|
|
|
const getObjectCommand = new GetObjectCommand({
|
|
Bucket: config.bucket,
|
|
Key: key,
|
|
});
|
|
|
|
const url = await getS3SignedUrl(client, getObjectCommand, {
|
|
expiresIn: ONE_HOUR / ONE_SECOND,
|
|
});
|
|
|
|
return res.status(200).json({ url });
|
|
} catch (error) {
|
|
log({
|
|
message: `Error getting presigned get url for ${key} \n\n ${error}`,
|
|
type: "error",
|
|
});
|
|
return res
|
|
.status(500)
|
|
.json({ error: "AWS Cloudfront Signed URL Error", message: error });
|
|
}
|
|
}
|