1
import path from 'node:path';
2
import fs from 'node:fs';
3

4
import express from 'express';
5
import sanitize from 'sanitize-filename';
6
import { Jimp } from '../jimp.js';
7
import { sync as writeFileAtomicSync } from 'write-file-atomic';
8

9
import { getImages, tryParse } from '../util.js';
10
import { getFileNameValidationFunction } from '../middleware/validateFileName.js';
11
import { applyAvatarCropResize } from './characters.js';
12
import { invalidateThumbnail } from './thumbnails.js';
13
import cacheBuster from '../middleware/cacheBuster.js';
14

15
export const router = express.Router();
16

17
router.post('/get', function (request, response) {
18
    const images = getImages(request.user.directories.avatars);
19
    response.send(images);
20
});
21

22
router.post('/delete', getFileNameValidationFunction('avatar'), function (request, response) {
23
    if (!request.body) return response.sendStatus(400);
24

25
    if (request.body.avatar !== sanitize(request.body.avatar)) {
26
        console.error('Malicious avatar name prevented');
27
        return response.sendStatus(403);
28
    }
29

30
    const fileName = path.join(request.user.directories.avatars, sanitize(request.body.avatar));
31

32
    if (fs.existsSync(fileName)) {
33
        fs.unlinkSync(fileName);
34
        invalidateThumbnail(request.user.directories, 'persona', sanitize(request.body.avatar));
35
        return response.send({ result: 'ok' });
36
    }
37

38
    return response.sendStatus(404);
39
});
40

41
router.post('/upload', getFileNameValidationFunction('overwrite_name'), async (request, response) => {
42
    if (!request.file) return response.sendStatus(400);
43

44
    try {
45
        const pathToUpload = path.join(request.file.destination, request.file.filename);
46
        const crop = tryParse(request.query.crop);
47
        const rawImg = await Jimp.read(pathToUpload);
48
        const image = await applyAvatarCropResize(rawImg, crop);
49

50
        // Remove previous thumbnail and bust cache if overwriting
51
        if (request.body.overwrite_name) {
52
            invalidateThumbnail(request.user.directories, 'persona', sanitize(request.body.overwrite_name));
53
            cacheBuster.bust(request, response);
54
        }
55

56
        const filename = sanitize(request.body.overwrite_name || `${Date.now()}.png`);
57
        const pathToNewFile = path.join(request.user.directories.avatars, filename);
58
        writeFileAtomicSync(pathToNewFile, image);
59
        fs.unlinkSync(pathToUpload);
60
        return response.send({ path: filename });
61
    } catch (err) {
62
        console.error('Error uploading user avatar:', err);
63
        return response.status(400).send('Is not a valid image');
64
    }
65
});