import { getToken } from "../../../actions/core/token"; import { azureHeaders } from "../../../actions/core/headers"; import { consoleLogger } from "../../../actions/core/logger"; import { hashAPIPath } from "../../../actions/core/hash"; import axios from "axios"; import { respondError, respondSuccess } from "../middleware/apiResponse"; import { getSession } from "next-auth/react"; const BASE_URL = process.env.API_ROOT || `http://localhost:${port}`; const forbidden = (res) => respondError(res, { status: 403, code: "FORBIDDEN", message: "Request not permitted" }); const isValidContainer = (value) => typeof value === "string" && value.length >= 3 && value.length <= 63 && /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(value); export default async function ApiProxy(req, res) { res.setHeader("Allow", "GET"); if (req.method !== "GET") { return respondError(res, { status: 405, code: "METHOD_NOT_ALLOWED", message: "Method not allowed" }); } const containerName = req.query.container; if (typeof containerName === "undefined" || containerName === "") { return respondError(res, { status: 400, code: "MISSING_REQUIRED_QUERY", message: "container is required" }); } if (!isValidContainer(containerName)) { return respondError(res, { status: 400, code: "INVALID_REQUEST", message: "Invalid request" }); } const session = await getSession({ req }); if ( typeof session?.user?.id !== "string" || session.user.id.length === 0 || session.user.id !== containerName ) { return forbidden(res); } const token = await getToken(); const queryUrl = "/api/file/getrepsblob?container=" + encodeURIComponent(containerName); try { const { data } = await axios.get( BASE_URL + queryUrl + hashAPIPath(queryUrl), azureHeaders(token.access_token) ); return respondSuccess(res, data); } catch (error) { consoleLogger(error); return respondError(res, { status: 400, code: "GET_REPS_BLOB_PROXY_FAILED", message: "Failed to fetch representation blobs" }); } }