21 lines
955 B
TypeScript
21 lines
955 B
TypeScript
import { HttpError } from "@/lib/security/http";
|
|
import { hasValidImageSignature, MAX_MEDIA_BYTES, type IMAGE_MIME_TYPES } from "./validation";
|
|
|
|
export const MAX_IMAGE_PIXELS = 40_000_000;
|
|
|
|
export async function inspectImage(bytes: Uint8Array, mimeType: (typeof IMAGE_MIME_TYPES)[number]) {
|
|
if (bytes.byteLength > MAX_MEDIA_BYTES) throw new HttpError(413, "image-too-large");
|
|
if (!hasValidImageSignature(bytes.subarray(0, 16), mimeType)) throw new HttpError(422, "invalid-image");
|
|
try {
|
|
const image = new Bun.Image(bytes, { maxPixels: MAX_IMAGE_PIXELS });
|
|
const metadata = await image.metadata();
|
|
const { width, height } = metadata;
|
|
if (!width || !height || width * height > MAX_IMAGE_PIXELS) throw new Error("invalid dimensions");
|
|
// Metadata alone accepts truncated images; decode pixels before publishing.
|
|
await image.bytes();
|
|
return { width, height };
|
|
} catch {
|
|
throw new HttpError(422, "invalid-image");
|
|
}
|
|
}
|