50 lines
1.7 KiB
TypeScript
50 lines
1.7 KiB
TypeScript
import { NextResponse } from "next/server";
|
|
import { writeFile, mkdir } from "fs/promises";
|
|
import path from "path";
|
|
import { getServerSession } from "next-auth";
|
|
import { authOptions } from "@/app/api/auth/[...nextauth]/route";
|
|
|
|
export async function POST(req: Request) {
|
|
try {
|
|
const session = await getServerSession(authOptions);
|
|
const adminIds = (process.env.ADMIN_DISCORD_IDS ?? "")
|
|
.split(",")
|
|
.map((s) => s.trim())
|
|
.filter(Boolean);
|
|
const discordId = (session?.user as { discordId?: string } | undefined)
|
|
?.discordId;
|
|
|
|
if (!discordId || !adminIds.includes(discordId)) {
|
|
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
|
|
}
|
|
|
|
const formData = await req.formData();
|
|
const file = formData.get("file") as File | null;
|
|
|
|
if (!file) {
|
|
return NextResponse.json({ error: "No file provided" }, { status: 400 });
|
|
}
|
|
|
|
if (!file.type.startsWith("image/")) {
|
|
return NextResponse.json({ error: "Only image files are allowed" }, { status: 400 });
|
|
}
|
|
|
|
const allowedExtensions = ["png", "jpg", "jpeg", "webp", "gif"];
|
|
const originalExt = (file.name.split(".").pop() || "").toLowerCase();
|
|
|
|
if (!allowedExtensions.includes(originalExt)) {
|
|
return NextResponse.json({ error: "Invalid image extension" }, { status: 400 });
|
|
}
|
|
|
|
const buffer = Buffer.from(await file.arrayBuffer());
|
|
const base64 = buffer.toString("base64");
|
|
const mimeType = file.type;
|
|
const dataUri = `data:${mimeType};base64,${base64}`;
|
|
|
|
return NextResponse.json({ url: dataUri });
|
|
} catch (error: any) {
|
|
console.error("Upload error:", error);
|
|
return NextResponse.json({ error: error.message || "Internal server error" }, { status: 500 });
|
|
}
|
|
}
|