aboutsummaryrefslogtreecommitdiffstats
path: root/api/handler/site.go
blob: 27968d7c944fcd2d2e9930979128e28c003cbbd0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
package handler

import (
	"crypto/subtle"
	"fmt"
	"log/slog"
	"net/http"
	"strings"

	"github.com/LMBishop/scrapbook/pkg/config"
	"github.com/LMBishop/scrapbook/pkg/index"
	"github.com/LMBishop/scrapbook/pkg/upload"
)

func UploadSiteVersion(mainConfig *config.MainConfig, index *index.SiteIndex) func(http.ResponseWriter, *http.Request) {
	return func(w http.ResponseWriter, r *http.Request) {
		token := strings.TrimPrefix("Bearer ", r.Header.Get("Authorization"))

		if len(mainConfig.Command.Secret) == 0 || subtle.ConstantTimeCompare([]byte(token), []byte(mainConfig.Command.Secret)) != 1 {
			w.WriteHeader(http.StatusForbidden)
			return
		}

		site := r.PathValue("site")
		reader, err := r.MultipartReader()
		if err != nil {
			w.WriteHeader(http.StatusInternalServerError)
			fmt.Fprintf(w, "could not read stream: %s", err.Error())
			slog.Error("could not read stream", "remoteAddr", r.RemoteAddr, "error", err)
			return
		}

		version, err := upload.HandleUpload(site, reader, index)
		if err != nil {
			w.WriteHeader(http.StatusInternalServerError)
			fmt.Fprint(w, err.Error())
			slog.Error("could not handle upload", "remoteAddr", r.RemoteAddr, "error", err)
			return
		}

		slog.Info("new version created", "site", site, "version", version, "remoteAddr", r.RemoteAddr)
		fmt.Fprintf(w, "version created: %s", version)
	}
}