35 lines
1.4 KiB
TypeScript
35 lines
1.4 KiB
TypeScript
import { jsonError } from "@/lib/server/api";
|
|
import { authenticatePublicApiRequest } from "@/lib/server/public-api-auth";
|
|
import { getPublicApiAsset } from "@/lib/server/public-api-assets";
|
|
import { publicApiError } from "@/lib/server/public-api-response";
|
|
import { readAssetForDownload } from "@/lib/server/storage";
|
|
|
|
export const runtime = "nodejs";
|
|
|
|
export async function GET(request: Request, context: { params: Promise<{ id: string }> }) {
|
|
try {
|
|
const client = authenticatePublicApiRequest(request);
|
|
const { id } = await context.params;
|
|
const asset = await getPublicApiAsset(client.id, id);
|
|
if (!asset) return jsonError("Asset not found.", 404);
|
|
const file = await readAssetForDownload(asset);
|
|
if (!file) return jsonError("Asset file is not downloadable.", 404);
|
|
return new Response(new Uint8Array(file.bytes), {
|
|
headers: {
|
|
"Content-Type": file.contentType,
|
|
"Content-Length": String(file.bytes.length),
|
|
"Content-Disposition": contentDisposition(asset.name),
|
|
"Cache-Control": "private, no-store"
|
|
}
|
|
});
|
|
} catch (error) {
|
|
return publicApiError(error);
|
|
}
|
|
}
|
|
|
|
function contentDisposition(fileName: string): string {
|
|
const clean = fileName.replace(/[\r\n/\\]/g, "_").trim() || "download";
|
|
const ascii = clean.replace(/[^\x20-\x7E]/g, "_").replace(/"/g, "_");
|
|
return `attachment; filename="${ascii}"; filename*=UTF-8''${encodeURIComponent(clean)}`;
|
|
}
|