/
data.go
104 lines (86 loc) · 2.75 KB
/
data.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
// Copyright (C) 2017, 2018, 2019 EGAAS S.A.
//
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation; either version 2 of the License, or (at
// your option) any later version.
//
// This program is distributed in the hope that it will be useful, but
// WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
// General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program; if not, write to the Free Software
// Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
package api
import (
"crypto/md5"
"encoding/hex"
"fmt"
"net/http"
"strings"
"github.com/AplaProject/go-apla/packages/consts"
"github.com/AplaProject/go-apla/packages/converter"
"github.com/AplaProject/go-apla/packages/crypto"
"github.com/AplaProject/go-apla/packages/model"
"github.com/gorilla/mux"
log "github.com/sirupsen/logrus"
)
const binaryColumn = "data"
func compareHash(data []byte, urlHash string) bool {
urlHash = strings.ToLower(urlHash)
var hash []byte
switch len(urlHash) {
case 32:
h := md5.Sum(data)
hash = h[:]
case 64:
hash, _ = crypto.Hash(data)
}
return hex.EncodeToString(hash) == urlHash
}
func getDataHandler(w http.ResponseWriter, r *http.Request) {
params := mux.Vars(r)
logger := getLogger(r)
table, column := params["table"], params["column"]
data, err := model.GetColumnByID(table, column, params["id"])
if err != nil {
logger.WithFields(log.Fields{"type": consts.DBError, "error": err}).Error("selecting data from table")
errorResponse(w, errNotFound)
return
}
if !compareHash([]byte(data), params["hash"]) {
errorResponse(w, errHashWrong)
return
}
w.Header().Set("Content-Type", "application/octet-stream")
w.Header().Set("Content-Disposition", "attachment")
w.Header().Set("Access-Control-Allow-Origin", "*")
w.Write([]byte(data))
return
}
func getBinaryHandler(w http.ResponseWriter, r *http.Request) {
params := mux.Vars(r)
logger := getLogger(r)
bin := model.Binary{}
found, err := bin.GetByID(converter.StrToInt64(params["id"]))
if err != nil {
logger.WithFields(log.Fields{"type": consts.DBError, "error": err}).Errorf("getting binary by id")
errorResponse(w, err)
return
}
if !found {
errorResponse(w, errNotFound)
return
}
if !compareHash(bin.Data, params["hash"]) {
errorResponse(w, errHashWrong)
return
}
w.Header().Set("Content-Type", bin.MimeType)
w.Header().Set("Content-Disposition", fmt.Sprintf(`attachment; filename="%s"`, bin.Name))
w.Header().Set("Access-Control-Allow-Origin", "*")
w.Write(bin.Data)
return
}