Rework file access and link archiving

server/api/file/content/[path].get.ts

@@ -0,0 +1,62 @@
+import { eq, sql } from 'drizzle-orm';
+import useDatabase from '~/composables/useDatabase';
+import { explorerContentTable } from '~/db/schema';
+
+export default defineEventHandler(async (e) => {
+    const path = decodeURIComponent(getRouterParam(e, "path") ?? '');
+    const query = getQuery(e);
+
+    if(!path)
+    {
+        setResponseStatus(e, 404);
+        return;
+    }
+
+    const db = useDatabase();
+    const content = db.select({ 
+        'content': sql<string>`cast(${explorerContentTable.content} as TEXT)`.as('content'),
+        'private': explorerContentTable.private,
+        'owner': explorerContentTable.owner,
+        'visit': explorerContentTable.visit,
+    }).from(explorerContentTable).where(eq(explorerContentTable.path, sql.placeholder('path'))).prepare().get({ path });
+
+    if(content !== undefined)
+    {
+        const session = await getUserSession(e);
+
+        if(content.private && (!session || !session.user))
+        {
+            setResponseStatus(e, 404);
+            return;
+        }
+        if(session && session.user && content.private && session.user.id !== content.owner)
+        {
+            setResponseStatus(e, 404);
+            return;
+        }
+        if(query.type === 'view')
+        {
+            db.update(explorerContentTable).set({ visit: content.visit + 1 }).where(eq(explorerContentTable.path, path)).run();
+        }
+        if(query.type === 'editing')
+        {
+            content.content = convertFromStorableLinks(content.content);
+        }
+
+        return { content: content.content };
+    }
+    
+    setResponseStatus(e, 404);
+    return;
+});
+
+export function convertFromStorableLinks(content: string): string
+{
+    /*return content.replaceAll(/!?\[\[([^\[\]\|\#]+)?(#+[^\[\]\|\#]+)?(\|[^\[\]\|\#]+)?\]\]/g, (e: string, a1?: string, a2?: string , a3?: string) => {
+        const parsed = parsePath(a1 ?? '%%%%----%%%%----%%%%');
+        const replacer = path.find(e => e.endsWith(parsed)) ?? parsed;
+        const value = `[[${replacer}${a2 ?? ''}${(!a3 && replacer !== parsed ? '|' + a1 : a3) ?? ''}]]`;
+        return value;
+    });*/
+    return content;
+}

server/api/file/overview/[path].get.ts

@@ -18,7 +18,6 @@ export default defineEventHandler(async (e) => {
         'owner': explorerContentTable.owner,
         'title': explorerContentTable.title,
         'type': explorerContentTable.type,
-        'content': sql<string>`cast(${explorerContentTable.content} as TEXT)`.as('content'),
         'navigable': explorerContentTable.navigable,
         'private': explorerContentTable.private,
         'order': explorerContentTable.order,
@@ -27,8 +26,19 @@ export default defineEventHandler(async (e) => {
 
     if(content !== undefined)
     {
-        db.update(explorerContentTable).set({ visit: content.visit + 1 }).where(eq(explorerContentTable.path, content.path)).run();
+        const session = await getUserSession(e);
 
+        if(content.private && (!session || !session.user))
+        {
+            setResponseStatus(e, 404);
+            return;
+        }
+        if(session && session.user && content.private && session.user.id !== content.owner)
+        {
+            setResponseStatus(e, 404);
+            return;
+        }
+        
         return content;
     }