Update routes and file paths, fix authentication and security issues

routes/Dpanel/API/NewFolder.js

@@ -0,0 +1,66 @@
+const express = require('express');
+const fs = require('fs');
+const path = require('path');
+const router = express.Router();
+const fileUpload = require('express-fileupload');
+const authMiddleware = require('../../../Middlewares/authMiddleware');
+const { loggers } = require('winston');
+const ncp = require('ncp').ncp;
+const configFile = fs.readFileSync(path.join(__dirname, '../../../data', 'setup.json'), 'utf-8')
+const config = JSON.parse(configFile);
+const bodyParser = require('body-parser');
+const crypto = require('crypto');
+const os = require('os');
+const { getUserData, getSetupData } = require('../../../Middlewares/watcherMiddleware');
+const { logger, logRequestInfo, ErrorLogger, authLogger } = require('../../../config/logs');
+
+let setupData = getSetupData();
+let userData = getUserData();
+router.use(bodyParser.json());
+
+router.get('/', (req, res) => {
+    res.status(400).json({ error: 'Bad Request. The request cannot be fulfilled due to bad syntax or missing parameters.' });
+});
+
+router.post('/', authMiddleware, (req, res) => {
+    try {
+        logger.info('Received POST request to create a new folder.');
+
+        const userId = req.userData.name;
+        let { folderName } = req.body;
+
+        logger.info('Received folderName:', folderName);
+
+        if (!folderName || typeof folderName !== 'string') {
+            ErrorLogger.error('Invalid folderName:', folderName);
+            return res.status(400).json({ message: 'Le nom du dossier ne peut pas être vide.' });
+        }
+
+        folderName = path.basename(folderName.trim());
+
+        if (!folderName) {
+            return res.status(400).json({ message: 'Le nom du dossier ne peut pas être vide.' });
+        }
+
+        const folderPath = path.join('cdn-files', userId, folderName);
+
+        if (fs.existsSync(folderPath)) {
+            logger.info('Folder already exists:', folderPath);
+            return res.status(400).json({ message: 'Le dossier existe déjà.' });
+        }
+
+        fs.mkdir(folderPath, (err) => {
+            if (err) {
+                ErrorLogger.error(err);
+                return res.status(500).json({ message: 'Erreur lors de la création du dossier.', error: err });
+            }
+            logger.info('Folder created successfully:', folderPath);
+            res.status(200).json({ message: 'Dossier créé avec succès.' });
+        });
+    } catch (error) {
+        ErrorLogger.error('Error creating folder:', error);
+        return res.status(500).json({ message: 'Erreur lors de la création du dossier.', error: error });
+    }
+});
+
+module.exports = router;