778ec9b88f
- add JWT authentication - admins are now stored inside the data provider - admin access can be restricted based on the source IP: both proxy header and connection IP are checked - deprecate REST API CLI: it is not relevant anymore Some other changes to the REST API can still happen before releasing SFTPGo 2.0.0 Fixes #197
102 lines
2.6 KiB
Go
102 lines
2.6 KiB
Go
package httpd
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"net/http"
|
|
"strconv"
|
|
|
|
"github.com/go-chi/render"
|
|
|
|
"github.com/drakkan/sftpgo/dataprovider"
|
|
"github.com/drakkan/sftpgo/vfs"
|
|
)
|
|
|
|
func getFolders(w http.ResponseWriter, r *http.Request) {
|
|
var err error
|
|
limit := 100
|
|
offset := 0
|
|
order := dataprovider.OrderASC
|
|
folderPath := ""
|
|
if _, ok := r.URL.Query()["limit"]; ok {
|
|
limit, err = strconv.Atoi(r.URL.Query().Get("limit"))
|
|
if err != nil {
|
|
err = errors.New("Invalid limit")
|
|
sendAPIResponse(w, r, err, "", http.StatusBadRequest)
|
|
return
|
|
}
|
|
if limit > 500 {
|
|
limit = 500
|
|
}
|
|
}
|
|
if _, ok := r.URL.Query()["offset"]; ok {
|
|
offset, err = strconv.Atoi(r.URL.Query().Get("offset"))
|
|
if err != nil {
|
|
err = errors.New("Invalid offset")
|
|
sendAPIResponse(w, r, err, "", http.StatusBadRequest)
|
|
return
|
|
}
|
|
}
|
|
if _, ok := r.URL.Query()["order"]; ok {
|
|
order = r.URL.Query().Get("order")
|
|
if order != dataprovider.OrderASC && order != dataprovider.OrderDESC {
|
|
err = errors.New("Invalid order")
|
|
sendAPIResponse(w, r, err, "", http.StatusBadRequest)
|
|
return
|
|
}
|
|
}
|
|
if _, ok := r.URL.Query()["folder_path"]; ok {
|
|
folderPath = r.URL.Query().Get("folder_path")
|
|
}
|
|
folders, err := dataprovider.GetFolders(limit, offset, order, folderPath)
|
|
if err == nil {
|
|
render.JSON(w, r, folders)
|
|
} else {
|
|
sendAPIResponse(w, r, err, "", http.StatusInternalServerError)
|
|
}
|
|
}
|
|
|
|
func addFolder(w http.ResponseWriter, r *http.Request) {
|
|
r.Body = http.MaxBytesReader(w, r.Body, maxRequestSize)
|
|
var folder vfs.BaseVirtualFolder
|
|
err := render.DecodeJSON(r.Body, &folder)
|
|
if err != nil {
|
|
sendAPIResponse(w, r, err, "", http.StatusBadRequest)
|
|
return
|
|
}
|
|
err = dataprovider.AddFolder(&folder)
|
|
if err != nil {
|
|
sendAPIResponse(w, r, err, "", getRespStatus(err))
|
|
return
|
|
}
|
|
renderFolder(w, r, folder.MappedPath)
|
|
}
|
|
|
|
func renderFolder(w http.ResponseWriter, r *http.Request, mappedPath string) {
|
|
folder, err := dataprovider.GetFolderByPath(mappedPath)
|
|
if err != nil {
|
|
sendAPIResponse(w, r, err, "", getRespStatus(err))
|
|
return
|
|
}
|
|
ctx := context.WithValue(r.Context(), render.StatusCtxKey, http.StatusCreated)
|
|
render.JSON(w, r.WithContext(ctx), folder)
|
|
}
|
|
|
|
func deleteFolderByPath(w http.ResponseWriter, r *http.Request) {
|
|
var folderPath string
|
|
if _, ok := r.URL.Query()["folder_path"]; ok {
|
|
folderPath = r.URL.Query().Get("folder_path")
|
|
}
|
|
if folderPath == "" {
|
|
err := errors.New("a non-empty folder path is required")
|
|
sendAPIResponse(w, r, err, "", http.StatusBadRequest)
|
|
return
|
|
}
|
|
|
|
err := dataprovider.DeleteFolder(folderPath)
|
|
if err != nil {
|
|
sendAPIResponse(w, r, err, "", getRespStatus(err))
|
|
return
|
|
}
|
|
sendAPIResponse(w, r, err, "Folder deleted", http.StatusOK)
|
|
}
|