Gilles Soulier
88 lines
1.9 KiB
Go
88 lines
1.9 KiB
Go
package handlers
|
|
|
|
import (
|
|
"bytes"
|
|
"image"
|
|
_ "image/jpeg"
|
|
"image/png"
|
|
"io"
|
|
"net/http"
|
|
"strings"
|
|
|
|
"github.com/disintegration/imaging"
|
|
"github.com/user/nanometrics/server/db"
|
|
)
|
|
|
|
const maxIconSize = 128
|
|
|
|
func IconUploadHandler(database *db.DB) http.HandlerFunc {
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|
if r.Method != http.MethodPost {
|
|
http.Error(w, "method not allowed", 405)
|
|
return
|
|
}
|
|
parts := strings.Split(strings.Trim(r.URL.Path, "/"), "/")
|
|
if len(parts) < 4 {
|
|
http.Error(w, "invalid path", 400)
|
|
return
|
|
}
|
|
agentID := parts[2]
|
|
|
|
r.ParseMultipartForm(2 << 20)
|
|
file, header, err := r.FormFile("icon")
|
|
if err != nil {
|
|
http.Error(w, "fichier manquant", 400)
|
|
return
|
|
}
|
|
defer file.Close()
|
|
|
|
mime := header.Header.Get("Content-Type")
|
|
if mime == "" {
|
|
mime = "image/png"
|
|
}
|
|
|
|
// SVG refusé (risque XSS)
|
|
if strings.Contains(mime, "svg") {
|
|
http.Error(w, "SVG non supporté — utilisez PNG, JPG ou WEBP", 400)
|
|
return
|
|
}
|
|
|
|
// Limite de taille
|
|
limited := io.LimitReader(file, 2<<20)
|
|
img, _, err := image.Decode(limited)
|
|
if err != nil {
|
|
http.Error(w, "image invalide", 400)
|
|
return
|
|
}
|
|
resized := imaging.Fit(img, maxIconSize, maxIconSize, imaging.Lanczos)
|
|
var buf bytes.Buffer
|
|
if err := png.Encode(&buf, resized); err != nil {
|
|
http.Error(w, err.Error(), 500)
|
|
return
|
|
}
|
|
if err := database.SaveIcon(agentID, buf.Bytes(), "image/png"); err != nil {
|
|
http.Error(w, err.Error(), 500)
|
|
return
|
|
}
|
|
w.WriteHeader(http.StatusNoContent)
|
|
}
|
|
}
|
|
|
|
func IconGetHandler(database *db.DB) http.HandlerFunc {
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|
parts := strings.Split(strings.Trim(r.URL.Path, "/"), "/")
|
|
if len(parts) < 4 {
|
|
http.Error(w, "invalid path", 400)
|
|
return
|
|
}
|
|
agentID := parts[2]
|
|
data, mime, err := database.GetIcon(agentID)
|
|
if err != nil {
|
|
http.Error(w, "not found", 404)
|
|
return
|
|
}
|
|
w.Header().Set("Content-Type", mime)
|
|
w.Write(data)
|
|
}
|
|
}
|