58 lines
2.1 KiB
Plaintext
58 lines
2.1 KiB
Plaintext
from PDAPI import *
|
|
from Utils.Lib import PermissionVerifier
|
|
|
|
|
|
__metadata__ = {
|
|
"route": "{DEFAULT_ROUTE}/<sha1>",
|
|
"methods": ["GET"],
|
|
"blueprint": "GERP",
|
|
"permission": 0,
|
|
"attributes": [],
|
|
"limit": "30 per minute",
|
|
}
|
|
|
|
def HandleRequest(_CleanedData):
|
|
sha1 = _CleanedData["params"].get("sha1", "").strip()
|
|
if not sha1 or len(sha1) != 40:
|
|
return {"code": 1, "msg": "无效的SHA1"}, 400
|
|
|
|
asset = GERPFileAsset.query.filter(GERPFileAsset.FileSHA1 == sha1).first()
|
|
if not asset:
|
|
return {"code": 404, "msg": "文件不存在"}, 404
|
|
|
|
if asset.CompanyUUID:
|
|
current_user = UGM.GetELTUser()
|
|
if not current_user:
|
|
return {"code": 401, "msg": "未登录"}, 401
|
|
if not PermissionVerifier(3.0, ["admin:fileasset_link"]):
|
|
return {"code": 403, "msg": "无文件资产链接查看权限"}, 403
|
|
current_role_uuid_str = flask.request.cookies.get("CurrentRoleUUID")
|
|
if current_role_uuid_str:
|
|
try:
|
|
role_uuid_bytes = UUIDObj(current_role_uuid_str).bytes
|
|
current_role = GERPRole.query.filter(GERPRole.RoleUUID == role_uuid_bytes).first()
|
|
if not current_role or not current_role.CompanyUUID or current_role.CompanyUUID != asset.CompanyUUID:
|
|
return {"code": 403, "msg": "无权访问其他公司的文件"}, 403
|
|
except:
|
|
return {"code": 403, "msg": "无权访问此文件"}, 403
|
|
else:
|
|
return {"code": 403, "msg": "无权访问此文件"}, 403
|
|
|
|
ref_link = f"https://api.gvsds.com/Asset/Download/{sha1}"
|
|
markdown_link = f""
|
|
html_link = f'<img src="{ref_link}" alt="{asset.FileName}" />'
|
|
|
|
return {
|
|
"code": 0,
|
|
"data": {
|
|
"sha1": asset.FileSHA1,
|
|
"fileName": asset.FileName,
|
|
"fileSize": asset.FileSize,
|
|
"mimeType": asset.MimeType,
|
|
"refLink": ref_link,
|
|
"markdownLink": markdown_link,
|
|
"htmlLink": html_link,
|
|
"refCount": asset.RefCount,
|
|
}
|
|
}, 200
|