Fix bug in uploadFile()'s URL.

authz/authz.go

@@ -92,6 +92,7 @@ p, *, *, GET, /api/get-payment, *, *
 p, *, *, POST, /api/update-payment, *, *
 p, *, *, POST, /api/invoice-payment, *, *
 p, *, *, GET, /api/get-providers, *, *
+p, *, *, POST, /api/notify-payment, *, *
 p, *, *, POST, /api/unlink, *, *
 p, *, *, POST, /api/set-password, *, *
 p, *, *, POST, /api/send-verification-code, *, *

object/avatar.go

@@ -59,15 +59,13 @@ func getPermanentAvatarUrl(organization string, username string, url string) str
 		return ""
 	}
 
-	fullFilePath := fmt.Sprintf("/avatar/%s/%s.png", organization, username)
-	uploadedFileUrl, _ := getUploadFileUrl(defaultStorageProvider, fullFilePath, false)
-
 	fileBuffer, err := downloadFile(url)
 	if err != nil {
 		panic(err)
 	}
 
-	_, _, err = UploadFileSafe(defaultStorageProvider, fullFilePath, fileBuffer)
+	fullFilePath := fmt.Sprintf("/avatar/%s/%s.png", organization, username)
+	uploadedFileUrl, _, err := UploadFileSafe(defaultStorageProvider, fullFilePath, fileBuffer)
 	if err != nil {
 		panic(err)
 	}

object/storage.go

@@ -99,6 +99,13 @@ func uploadFile(provider *Provider, fullFilePath string, fileBuffer *bytes.Buffe
 		return "", "", err
 	}
 
+	if provider.Type != "Local File System" {
+		fileUrl, err = storageProvider.GetURL(objectKey)
+		if err != nil {
+			return "", "", err
+		}
+	}
+
 	return fileUrl, objectKey, nil
 }
 

routers/authz_filter.go

@@ -122,6 +122,10 @@ func AuthzFilter(ctx *context.Context) {
 	urlPath := getUrlPath(ctx.Request.URL.Path)
 	objOwner, objName := getObject(ctx)
 
+	if strings.HasPrefix(urlPath, "/api/notify-payment") {
+		urlPath = "/api/notify-payment"
+	}
+
 	isAllowed := authz.IsAllowed(subOwner, subName, method, urlPath, objOwner, objName)
 
 	result := "deny"