homeio

1import { createReadStream } from "node:fs";
2import path from "node:path";
3import { Readable } from "node:stream";
4import { type NextRequest, NextResponse } from "next/server";
5import { serverEnv } from "@/lib/server/env";
6import { requireApiSession } from "@/lib/server/modules/auth/api";
7import {
8  createRequestId,
9  logServerAction,
10  withServerTiming,
11} from "@/lib/server/logging/logger";
12import {
13  FileServiceError,
14  getMimeTypeForExtension,
15  resolveReadableFileAbsolutePath,
16} from "@/lib/server/modules/files/service";
17
18export const runtime = "nodejs";
19
20function toAttachmentFilename(filePath: string) {
21  const fileName = path.basename(filePath).replaceAll('"', "");
22  return `attachment; filename="${fileName}"`;
23}
24
25export async function GET(request: NextRequest) {
26  const apiSession = await requireApiSession(request);
27  if (apiSession.response) return apiSession.response;
28  const requestId = createRequestId();
29
30  try {
31    return await withServerTiming(
32      {
33        layer: "api",
34        action: "files.download.get",
35        requestId,
36      },
37      async () => {
38        const filePath = request.nextUrl.searchParams.get("path");
39        if (!filePath) {
40          return NextResponse.json(
41            {
42              error: "Missing file path",
43              code: "invalid_path",
44            },
45            {
46              status: 400,
47            },
48          );
49        }
50
51        const includeHidden =
52          serverEnv.FILES_ALLOW_HIDDEN &&
53          request.nextUrl.searchParams.get("includeHidden") === "true";
54
55        const resolved = await resolveReadableFileAbsolutePath({
56          path: filePath,
57          includeHidden,
58        });
59        const ext = path.extname(resolved.path).slice(1).toLowerCase() || null;
60        const mimeType = getMimeTypeForExtension(ext) ?? "application/octet-stream";
61        const stream = createReadStream(resolved.absolutePath);
62
63        return new NextResponse(Readable.toWeb(stream) as ReadableStream, {
64          headers: {
65            "Content-Type": mimeType,
66            "Content-Disposition": toAttachmentFilename(resolved.path),
67            "Cache-Control": "no-store",
68          },
69        });
70      },
71    );
72  } catch (error) {
73    if (error instanceof FileServiceError) {
74      return NextResponse.json(
75        {
76          error: error.message,
77          code: error.code,
78        },
79        {
80          status: error.statusCode,
81        },
82      );
83    }
84
85    logServerAction({
86      level: "error",
87      layer: "api",
88      action: "files.download.get.response",
89      status: "error",
90      requestId,
91      message: "Unable to download file",
92      error,
93    });
94
95    return NextResponse.json(
96      {
97        error: "Unable to download file",
98        code: "internal_error",
99      },
100      {
101        status: 500,
102      },
103    );
104  }
105}
106
107