added hashing on api calls

2022-07-12 12:49:26 +01:00
parent f23ad2a300
commit be9f86b6b2
13 changed files with 234 additions and 158 deletions
@@ -6,6 +6,7 @@ import {
    uploadFile,
    deleteBlob,
 } from "../../../actions/azurestorage";
+import { hashAPIPath } from "../../../actions";

 import middleware from "../middleware/middleware";
 import nextConnect from "next-connect";
@@ -16,11 +17,24 @@ ApiProxy.use(middleware);
 ApiProxy.get(async (req, res) => {
    var containerName = req.query.container;
    var blobName = req.query.blobname;
-    console.log(containerName, blobName);
+    var checkHash = req.query.hash;

-    await deleteBlob(containerName, "files/" + blobName).then((data) => {
-        return res.status(200).json({ data: data });
-    });
+    var checkquerypath =
+        "/api/file/deleteblob?container=" +
+        containerName.toLowerCase() +
+        "&blobname=" +
+        blobName;
+
+    console.log(hashAPIPath(checkquerypath), checkHash);
+    console.log(hashAPIPath(checkquerypath) == "&hash=" + checkHash);
+
+    if (hashAPIPath(checkquerypath) == "&hash=" + checkHash) {
+        await deleteBlob(containerName, "files/" + blobName).then((data) => {
+            return res.status(200).json({ data: data });
+        });
+    } else {
+        return res.status(400).json();
+    }
 });

 export const config = {