Files
erika/app/api/admin/video-file/route.ts
T

65 lines
2.1 KiB
TypeScript

import { createWriteStream } from "node:fs";
import { mkdir, unlink } from "node:fs/promises";
import { Readable } from "node:stream";
import { pipeline } from "node:stream/promises";
import { randomUUID } from "node:crypto";
import { NextResponse } from "next/server";
import { requireAdmin } from "@/lib/auth/auth";
export const dynamic = "force-dynamic";
const VIDEO_DIR = process.env.VIDEO_UPLOAD_DIR || "/nfs/erika";
const VIDEO_TYPES = new Set(["video/mp4", "video/quicktime", "video/webm"]);
function safeFileName(value: string) {
return value.replace(/[^a-zA-Z0-9._-]/g, "_").slice(-180) || "video";
}
export async function POST(request: Request) {
let filePath: string | null = null;
try {
const discordId = await requireAdmin();
const encodedName = request.headers.get("x-file-name");
const mimeType = request.headers.get("content-type") ?? "";
const contentLength = Number(request.headers.get("content-length") ?? 0);
if (!encodedName || !request.body) {
return NextResponse.json(
{ error: "No video provided." },
{ status: 400 },
);
}
if (!VIDEO_TYPES.has(mimeType)) {
return NextResponse.json(
{ error: "Use an MP4, MOV, or WebM video." },
{ status: 400 },
);
}
const originalFilename = decodeURIComponent(encodedName);
const stagedVideoId = randomUUID();
const stagingDirectory = `${VIDEO_DIR}/staging/${discordId}`;
filePath = `${stagingDirectory}/${stagedVideoId}-${safeFileName(originalFilename)}`;
await mkdir(/* turbopackIgnore: true */ stagingDirectory, { recursive: true });
await pipeline(
Readable.fromWeb(request.body as never),
createWriteStream(/* turbopackIgnore: true */ filePath, { flags: "wx" }),
);
return NextResponse.json({
stagedVideoId,
originalFilename,
mimeType,
size: contentLength,
});
} catch (error) {
if (filePath) await unlink(/* turbopackIgnore: true */ filePath).catch(() => undefined);
const message = error instanceof Error ? error.message : "Upload failed.";
const status =
message === "Unauthorized" || message === "Not authenticated" ? 401 : 400;
return NextResponse.json({ error: message }, { status });
}
}