seadoc_access_token (#5409)

* seadoc_access_token

* SeadocUploadFile

seahub/seadoc/apis.py

@@ -1,28 +1,140 @@
+import os
 import logging
+import requests
+import posixpath
 
 from rest_framework.response import Response
 from rest_framework.views import APIView
 from rest_framework import status
+from rest_framework.authentication import SessionAuthentication
+from rest_framework.permissions import IsAuthenticated
 
+from seaserv import seafile_api
+
+from seahub.views import check_folder_permission
+from seahub.api2.authentication import TokenAuthentication
 from seahub.api2.utils import api_error
 from seahub.api2.throttling import UserRateThrottle
 from seahub.seadoc.utils import is_valid_seadoc_access_token, get_seadoc_upload_link, \
-    get_seadoc_download_link
+    get_seadoc_download_link, get_seadoc_file_uuid, gen_seadoc_access_token
 from seahub.utils.file_types import SEADOC
-from seahub.utils import get_file_type_and_ext
+from seahub.utils import get_file_type_and_ext, normalize_file_path
 from seahub.tags.models import FileUUIDMap
 
 
 logger = logging.getLogger(__name__)
 
 
+class SeadocAccessToken(APIView):
+
+    authentication_classes = (TokenAuthentication, SessionAuthentication)
+    permission_classes = (IsAuthenticated,)
+    throttle_classes = (UserRateThrottle, )
+
+    def get(self, request, repo_id):
+        username = request.user.username
+        # argument check
+        path = request.GET.get('p', None)
+        if not path:
+            error_msg = 'p invalid.'
+            return api_error(status.HTTP_400_BAD_REQUEST, error_msg)
+
+        path = normalize_file_path(path)
+        parent_dir = os.path.dirname(path)
+        filename = os.path.basename(path)
+
+        filetype, fileext = get_file_type_and_ext(filename)
+        if filetype != SEADOC:
+            error_msg = 'seadoc file type %s invalid.' % filetype
+            return api_error(status.HTTP_400_BAD_REQUEST, error_msg)
+
+        # resource check
+        repo = seafile_api.get_repo(repo_id)
+        if not repo:
+            error_msg = 'Library %s not found.' % repo_id
+            return api_error(status.HTTP_404_NOT_FOUND, error_msg)
+
+        try:
+            obj_id = seafile_api.get_file_id_by_path(repo_id, path)
+        except Exception as e:
+            logger.error(e)
+            error_msg = 'Internal Server Error'
+            return api_error(status.HTTP_500_INTERNAL_SERVER_ERROR, error_msg)
+
+        if not obj_id:
+            error_msg = 'File %s not found.' % path
+            return api_error(status.HTTP_404_NOT_FOUND, error_msg)
+
+        # permission check
+        permission = check_folder_permission(request, repo_id, parent_dir)
+        if not permission:
+            error_msg = 'Permission denied.'
+            return api_error(status.HTTP_403_FORBIDDEN, error_msg)
+
+        #
+        file_uuid = get_seadoc_file_uuid(repo, parent_dir, filename)
+        access_token = gen_seadoc_access_token(file_uuid, username)
+
+        return Response({'access_token': access_token})
+
+
+class SeadocUploadFile(APIView):
+
+    authentication_classes = ()
+    throttle_classes = (UserRateThrottle,)
+
+    def post(self, request, file_uuid):
+        # jwt permission check
+        auth = request.META.get('HTTP_AUTHORIZATION', '').split()
+        if not is_valid_seadoc_access_token(auth, file_uuid):
+            error_msg = 'Permission denied.'
+            return api_error(status.HTTP_403_FORBIDDEN, error_msg)
+
+        file = request.FILES.get('file', None)
+        if not file:
+            error_msg = 'file not found.'
+            return api_error(status.HTTP_400_BAD_REQUEST, error_msg)
+
+        uuid_map = FileUUIDMap.objects.get_fileuuidmap_by_uuid(file_uuid)
+        if not uuid_map:
+            error_msg = 'seadoc uuid %s not found.' % file_uuid
+            return api_error(status.HTTP_404_NOT_FOUND, error_msg)
+
+        filetype, fileext = get_file_type_and_ext(uuid_map.filename)
+        if filetype != SEADOC:
+            error_msg = 'seadoc file type %s invalid.' % filetype
+            return api_error(status.HTTP_400_BAD_REQUEST, error_msg)
+
+        file_path = posixpath.join(uuid_map.parent_path, uuid_map.filename)
+        file_id = seafile_api.get_file_id_by_path(uuid_map.repo_id, file_path)
+        if not file_id:  # save file anyway
+            seafile_api.post_empty_file(
+                uuid_map.repo_id, uuid_map.parent_path, uuid_map.filename, '')
+        #
+        upload_link = get_seadoc_upload_link(uuid_map)
+        if not upload_link:
+            error_msg = 'seadoc file %s not found.' % uuid_map.filename
+            return api_error(status.HTTP_404_NOT_FOUND, error_msg)
+
+        # update file
+        files = {
+            'file': file,
+            'file_name': uuid_map.filename,
+            'target_file': file_path,
+        }
+        upload_link = get_seadoc_upload_link(uuid_map)
+        requests.post(upload_link, files=files)
+
+        return Response({'success': True})
+
+
 class SeadocUploadLink(APIView):
 
     authentication_classes = ()
     throttle_classes = (UserRateThrottle,)
 
     def get(self, request, file_uuid):
-        # permission check
+        # jwt permission check
         auth = request.META.get('HTTP_AUTHORIZATION', '').split()
         if not is_valid_seadoc_access_token(auth, file_uuid):
             error_msg = 'Permission denied.'
@@ -38,13 +150,23 @@ class SeadocUploadLink(APIView):
             error_msg = 'seadoc file type %s invalid.' % filetype
             return api_error(status.HTTP_400_BAD_REQUEST, error_msg)
 
+        file_path = posixpath.join(uuid_map.parent_path, uuid_map.filename)
+        file_id = seafile_api.get_file_id_by_path(uuid_map.repo_id, file_path)
+        if not file_id:  # save file anyway
+            seafile_api.post_empty_file(
+                uuid_map.repo_id, uuid_map.parent_path, uuid_map.filename, '')
+
         #
         upload_link = get_seadoc_upload_link(uuid_map)
         if not upload_link:
             error_msg = 'seadoc file %s not found.' % uuid_map.filename
             return api_error(status.HTTP_404_NOT_FOUND, error_msg)
 
-        return Response({'upload_link': upload_link})
+        return Response({
+            'upload_link': upload_link,
+            'parent_dir': uuid_map.parent_path,
+            'filename': uuid_map.filename,
+        })
 
 
 class SeadocDownloadLink(APIView):
@@ -53,7 +175,7 @@ class SeadocDownloadLink(APIView):
     throttle_classes = (UserRateThrottle,)
 
     def get(self, request, file_uuid):
-        # permission check
+        # jwt permission check
         auth = request.META.get('HTTP_AUTHORIZATION', '').split()
         if not is_valid_seadoc_access_token(auth, file_uuid):
             error_msg = 'Permission denied.'

seahub/seadoc/urls.py

@@ -1,7 +1,9 @@
 from django.conf.urls import url
-from .apis import SeadocUploadLink, SeadocDownloadLink
+from .apis import SeadocAccessToken, SeadocUploadLink, SeadocDownloadLink, SeadocUploadFile
 
 urlpatterns = [
+    url(r'^access-token/(?P<repo_id>[-0-9a-f]{36})/$', SeadocAccessToken.as_view(), name='seadoc_access_token'),
+    url(r'^upload-file/(?P<file_uuid>[-0-9a-f]{36})/$', SeadocUploadFile.as_view(), name='seadoc_upload_file'),
     url(r'^upload-link/(?P<file_uuid>[-0-9a-f]{36})/$', SeadocUploadLink.as_view(), name='seadoc_upload_link'),
     url(r'^download-link/(?P<file_uuid>[-0-9a-f]{36})/$', SeadocDownloadLink.as_view(), name='seadoc_download_link'),
 ]