eh-downloader/routes/api/files/[token].ts

import { Handlers } from "$fresh/server.ts";
import { get_task_manager } from "../../../server.ts";
import type { EhFiles } from "../../../server/files.ts";
import { return_data, return_error } from "../../../server/utils.ts";
import {
    SharedToken,
    SharedTokenType,
    User,
    UserPermission,
} from "../../../db.ts";
import { compareNum } from "../../../utils.ts";

export const handler: Handlers = {
    GET(_req, ctx) {
        const u = <User | undefined> ctx.state.user;
        if (
            u && !u.is_admin &&
            !(Number(u.permissions) & UserPermission.ReadGallery)
        ) {
            return return_error(403, "Permission denied.");
        }
        const st = <SharedToken | undefined> ctx.state.shared_token;
        const tokens = decodeURIComponent(ctx.params.token).split(",");
        const m = get_task_manager();
        const enable_server_timing = m.cfg.enable_server_timing;
        const start = enable_server_timing ? Date.now() : 0;
        const headers: HeadersInit = {};
        const data: EhFiles = {};
        for (const token of tokens) {
            if (st && st.type == SharedTokenType.Gallery) {
                const pmetas = m.db.get_pmeta_by_token_only(token);
                if (!pmetas.some((m) => !compareNum(m.gid, st.info.gid))) {
                    return return_error(403, "Permission denied.");
                }
            }
            data[token] = m.db.get_files(token).map((d) => {
                /**@ts-ignore */
                delete d.path;
                /**@ts-ignore */
                delete d.token;
                return d;
            });
        }
        if (enable_server_timing) {
            const end = Date.now();
            headers["Server-Timing"] = `db;dur=${end - start}`;
        }
        return return_data(data, 200, headers);
    },
};