Changed assets endpoint to multipart

api/assets.go

@@ -4,10 +4,9 @@ import (
 	"TheAdversary/config"
 	"TheAdversary/database"
 	"TheAdversary/schema"
-	"encoding/base64"
 	"encoding/json"
-	"go.uber.org/zap"
 	"gorm.io/gorm/clause"
+	"io"
 	"net/http"
 	"net/url"
 	"path"
@@ -37,6 +36,12 @@ func Assets(w http.ResponseWriter, r *http.Request) {
 }
 
 func assetsGet(w http.ResponseWriter, r *http.Request) {
+	_, ok := authorizedSession(r)
+	if !ok {
+		w.WriteHeader(http.StatusUnauthorized)
+		return
+	}
+
 	query := r.URL.Query()
 	request := database.GetDB().Table("assets")
 
@@ -65,22 +70,32 @@ func assetsGet(w http.ResponseWriter, r *http.Request) {
 	json.NewEncoder(w).Encode(&assets)
 }
 
-type assetsPostPayload struct {
-	Name    string `json:"name"`
-	Content string `json:"data"`
-}
-
 func assetsPost(w http.ResponseWriter, r *http.Request) {
-	var payload assetsPostPayload
-	if err := json.NewDecoder(r.Body).Decode(&payload); err != nil {
-		InvalidJson.Send(w)
+	_, ok := authorizedSession(r)
+	if !ok {
+		w.WriteHeader(http.StatusUnauthorized)
 		return
 	}
 
-	rawData, err := base64.StdEncoding.DecodeString(payload.Content)
+	file, header, err := r.FormFile("file")
 	if err != nil {
-		zap.S().Warnf("Cannot decode base64")
-		ApiError{Message: "invalid base64 content", Code: http.StatusUnprocessableEntity}.Send(w)
+		if err == http.ErrMissingFile {
+			ApiError{Message: "file is missing", Code: http.StatusUnprocessableEntity}.Send(w)
+		} else {
+			ApiError{Message: "could not parse file" + err.Error(), Code: http.StatusInternalServerError}.Send(w)
+		}
+		return
+	}
+	defer file.Close()
+
+	var name string
+	if name = r.FormValue("name"); name == "" {
+		name = header.Filename
+	}
+
+	rawData, err := io.ReadAll(file)
+	if err != nil {
+		ApiError{Message: "failed to read file", Code: http.StatusInternalServerError}.Send(w)
 		return
 	}
 
@@ -89,7 +104,7 @@ func assetsPost(w http.ResponseWriter, r *http.Request) {
 		Name string
 		Data []byte
 		Link string
-	}{Name: payload.Name, Data: rawData, Link: url.PathEscape(payload.Name)}
+	}{Name: name, Data: rawData, Link: url.PathEscape(name)}
 
 	if database.GetDB().Table("assets").Clauses(clause.OnConflict{
 		Columns:   []clause.Column{{Name: "name"}},
@@ -97,7 +112,7 @@ func assetsPost(w http.ResponseWriter, r *http.Request) {
 	}).Create(&tmpDatabaseSchema).RowsAffected == 0 {
 		w.WriteHeader(http.StatusConflict)
 	} else {
-		w.WriteHeader(http.StatusOK)
+		w.WriteHeader(http.StatusCreated)
 		json.NewEncoder(w).Encode(schema.Asset{
 			Id:   tmpDatabaseSchema.Id,
 			Name: tmpDatabaseSchema.Name,
@@ -111,6 +126,12 @@ type assetsDeletePayload struct {
 }
 
 func assetsDelete(w http.ResponseWriter, r *http.Request) {
+	_, ok := authorizedSession(r)
+	if !ok {
+		w.WriteHeader(http.StatusUnauthorized)
+		return
+	}
+
 	var payload assetsDeletePayload
 	if err := json.NewDecoder(r.Body).Decode(&payload); err != nil {
 		InvalidJson.Send(w)