Files
Supervisor/server/api/download.get.ts

92 lines
2.5 KiB
TypeScript

import { Readable } from "node:stream"
import {
runSsh,
shellQuote,
resolveFolderRemoteDir,
REMOTE_HOST,
} from "../utils/ssh.ts"
import {spawn} from "unenv/node/child_process";
const isSafeFolder = (value: string) => /^[a-zA-Z0-9._-]+$/.test(value)
const isSafeFile = (value: string) => /^[a-zA-Z0-9._-]+$/.test(value)
function buildContentDisposition(fileName: string) {
const asciiName = fileName.replace(/[^\x20-\x7E]/g, "_").replace(/["\\]/g, "_")
return `attachment; filename="${asciiName}"; filename*=UTF-8''${encodeURIComponent(fileName)}`
}
function speedtestStream(event: H3Event) {
const size = 128 * 1024 * 1024
let sent = 0
const stream = new Readable({
read(chunkSize) {
if (sent >= size) {
this.push(null)
return
}
const remaining = size - sent
const chunk = Buffer.alloc(Math.min(chunkSize, remaining), "a")
sent += chunk.length
this.push(chunk)
}
})
setHeader(event, "Content-Type", "application/octet-stream")
setHeader(event, "Content-Length", size)
return stream
}
export default defineEventHandler(async (event) => {
const { folder, file } = getQuery(event)
const folderName = typeof folder === "string" ? folder : null
const fileName = typeof file === "string" ? file : null
// Compat mode: utilisé par le test de débit.
if (!folderName || !fileName) {
return speedtestStream(event)
}
if (!isSafeFolder(folderName) || !isSafeFile(fileName)) {
throw createError({ statusCode: 400, statusMessage: "Paramètres invalides" })
}
const remoteDir = await resolveFolderRemoteDir(folderName)
if (!remoteDir) {
throw createError({ statusCode: 404, statusMessage: "Dossier introuvable" })
}
const remotePath = `${remoteDir}/${fileName}`
const existsOutput = await runSsh(`[ -f ${shellQuote(remotePath)} ] && echo yes || echo no`)
if (existsOutput.trim() !== "yes") {
throw createError({ statusCode: 404, statusMessage: "Fichier introuvable" })
}
setHeader(event, "Content-Type", "application/octet-stream")
setHeader(event, "Content-Disposition", buildContentDisposition(fileName))
const child = spawn("ssh", [
"-o",
"BatchMode=yes",
"-o",
"ConnectTimeout=5",
REMOTE_HOST,
`cat ${shellQuote(remotePath)}`
])
let stderr = ""
child.stderr.on("data", (chunk) => {
stderr += chunk.toString()
})
child.on("close", (code) => {
if (code !== 0) {
console.error(`Erreur téléchargement SSH (${code}): ${stderr}`)
}
})
return sendStream(event, child.stdout)
})