Merge Pakfire Hub into the main webapp

[pbs.git] / src / web / uploads.py

#!/usr/bin/python3
###############################################################################
#                                                                             #
# Pakfire - The IPFire package management system                              #
# Copyright (C) 2011 Pakfire development team                                 #
#                                                                             #
# This program is free software: you can redistribute it and/or modify        #
# it under the terms of the GNU General Public License as published by        #
# the Free Software Foundation, either version 3 of the License, or           #
# (at your option) any later version.                                         #
#                                                                             #
# This program is distributed in the hope that it will be useful,             #
# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
# GNU General Public License for more details.                                #
#                                                                             #
# You should have received a copy of the GNU General Public License           #
# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
#                                                                             #
###############################################################################

import io
import tornado.web

from . import base
from .. import users

@tornado.web.stream_request_body
class APIv1IndexHandler(base.APIMixin, tornado.web.RequestHandler):
	# Allow users to perform uploads
	allow_users = True

	def initialize(self):
		# Buffer to cache the uploaded content
		self.buffer = io.BytesIO()

	def data_received(self, data):
		"""
			Called when some data is being received
		"""
		self.buffer.write(data)

	@tornado.web.authenticated
	def get(self):
		uploads = []

		for upload in self.current_user.uploads:
			uploads.append({
				"id"         : upload.uuid,
				"filename"   : upload.filename,
				"size"       : upload.size,

				"created_at" : upload.created_at.isoformat(),
				"expires_at" : upload.expires_at.isoformat(),
			})

		self.finish({
			"status"  : "ok",
			"uploads" : uploads,
		})

	@tornado.web.authenticated
	async def put(self):
		"""
			Called after the entire file has been received
		"""
		# Fetch the filename
		filename = self.get_argument("filename")

		# Fetch file size
		size = self.get_argument_int("size")

		# Fetch the digest argument
		algo, delim, hexdigest = self.get_argument("digest").partition(":")

		# Convert hexdigest
		digest = bytes.fromhex(hexdigest)

		# Move to the beginning of the buffer
		self.buffer.seek(0)

		# Create a new upload
		with self.db.transaction():
			try:
				upload = self.backend.uploads.create(
					filename,
					size=size,
					uploader=self.current_user,
				)

			except users.QuotaExceededError as e:
				raise tornado.web.HTTPError(400,
					"Quota exceeded for %s" % self.current_user) from e

			# Import the payload from the buffer
			await upload.copyfrom(self.buffer)

			# Check the digest
			if not await upload.check_digest(algo, digest):
				# 422 - Unprocessable Entity
				raise tornado.web.HTTPError(422, "Digest did not match")

		# Send the ID of the upload back to the client
		self.finish({
			"id"         : upload.uuid,
			"expires_at" : upload.expires_at.isoformat(),
		})


class APIv1DetailHandler(base.APIMixin, tornado.web.RequestHandler):
	# Allow users to perform uploads
	allow_users = True

	@tornado.web.authenticated
	async def delete(self, uuid):
		"""
			Deletes an upload with a certain UUID
		"""
		# Fetch the upload
		upload = self.backend.uploads.get_by_uuid(uuid)
		if not upload:
			raise tornado.web.HTTPError(404, "Could not find upload %s" % uuid)

		# Check for permissions
		if not upload.has_perm(self.current_user):
			raise tornado.web.HTTPError(403, "%s has no permission to delete %s" \
				% (self.current_user, upload))

		# Delete the upload
		with self.db.transaction():
			await upload.delete()

		self.finish({
			"status" : "ok",
		})