Update routes and file paths, fix authentication and security issues
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
48
routes/Dpanel/API/DeleteFolfder.js
Normal file
48
routes/Dpanel/API/DeleteFolfder.js
Normal file
@@ -0,0 +1,48 @@
|
||||
const express = require('express');
|
||||
const fs = require('fs');
|
||||
const path = require('path');
|
||||
const router = express.Router();
|
||||
const fileUpload = require('express-fileupload');
|
||||
const authMiddleware = require('../../../Middlewares/authMiddleware');
|
||||
const { loggers } = require('winston');
|
||||
const ncp = require('ncp').ncp;
|
||||
const configFile = fs.readFileSync(path.join(__dirname, '../../../data', 'setup.json'), 'utf-8')
|
||||
const config = JSON.parse(configFile);
|
||||
const bodyParser = require('body-parser');
|
||||
const crypto = require('crypto');
|
||||
const os = require('os');
|
||||
const { getUserData, getSetupData } = require('../../../Middlewares/watcherMiddleware');
|
||||
const { logger, logRequestInfo, ErrorLogger, authLogger } = require('../../../config/logs');
|
||||
|
||||
let setupData = getSetupData();
|
||||
let userData = getUserData();
|
||||
router.use(bodyParser.json());
|
||||
|
||||
router.get('/', (req, res) => {
|
||||
res.status(400).json({ error: 'Bad Request. The request cannot be fulfilled due to bad syntax or missing parameters.' });
|
||||
});
|
||||
|
||||
router.delete('/:folderName', authMiddleware, (req, res) => {
|
||||
const userId = req.userData.name;
|
||||
const folderName = req.params.folderName;
|
||||
const userFolderPath = path.join('cdn-files', userId);
|
||||
const folderPath = path.join(userFolderPath, folderName);
|
||||
|
||||
if (!fs.existsSync(folderPath)) {
|
||||
return res.status(404).json({ error: 'Le dossier spécifié n\'existe pas.' });
|
||||
}
|
||||
|
||||
if (!folderPath.startsWith(userFolderPath)) {
|
||||
return res.status(403).json({ error: 'Vous n\'avez pas la permission de supprimer ce dossier.' });
|
||||
}
|
||||
|
||||
fs.rmdir(folderPath, { recursive: true }, (err) => {
|
||||
if (err) {
|
||||
console.error(err);
|
||||
return res.status(500).json({ error: 'Erreur lors de la suppression du dossier.' });
|
||||
}
|
||||
res.json({ deleted: true, success: 'Dossier supprimé avec succès.' });
|
||||
});
|
||||
});
|
||||
|
||||
module.exports = router;
|
||||
Reference in New Issue
Block a user