org.structr.web.servlet.UploadServlet Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of structr-ui Show documentation
Show all versions of structr-ui Show documentation
Structr is an open source framework based on the popular Neo4j graph database.
The newest version!
/**
* Copyright (C) 2010-2016 Structr GmbH
*
* This file is part of Structr .
*
* Structr is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or (at your option) any later version.
*
* Structr is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with Structr. If not, see fileItemsList = uploader.parseRequest(request);
Iterator fileItemsIterator = fileItemsList.iterator();
final Map params = new HashMap<>();
while (fileItemsIterator.hasNext()) {
final FileItem item = fileItemsIterator.next();
if (item.isFormField()) {
params.put(item.getFieldName(), item.getString());
} else {
try {
final String contentType = item.getContentType();
boolean isImage = (contentType != null && contentType.startsWith("image"));
boolean isVideo = (contentType != null && contentType.startsWith("video"));
// Override type from path info
if (params.containsKey(NodeInterface.type.jsonName())) {
type = (String) params.get(NodeInterface.type.jsonName());
}
final Class cls = type != null
? SchemaHelper.getEntityClassForRawType(type)
: (isImage
? Image.class
: (isVideo
? VideoFile.class
: org.structr.dynamic.File.class));
final String name = item.getName().replaceAll("\\\\", "/");
final org.structr.dynamic.File newFile = FileHelper.createFile(securityContext, IOUtils.toByteArray(item.getInputStream()), contentType, cls);
newFile.setProperty(AbstractNode.name, PathHelper.getName(name));
PropertyMap additionalProperties = PropertyMap.inputTypeToJavaType(securityContext, cls, params);
for (PropertyKey key : additionalProperties.keySet()) {
newFile.setProperty(key, additionalProperties.get(key));
}
if (!newFile.validatePath(securityContext, null)) {
newFile.setProperty(AbstractNode.name, name.concat("_").concat(FileHelper.getDateString()));
}
// upload trigger
newFile.notifyUploadCompletion();
// Just write out the uuids of the new files
out.write(newFile.getUuid());
} catch (IOException ex) {
logger.log(Level.WARNING, "Could not upload file", ex);
}
}
}
tx.success();
} catch (FrameworkException | IOException | FileUploadException t) {
logger.log(Level.SEVERE, "Exception while processing request", t);
UiAuthenticator.writeInternalServerError(response);
}
}
@Override
protected void doPut(final HttpServletRequest request, final HttpServletResponse response) throws ServletException {
try (final Tx tx = StructrApp.getInstance().tx(false, false, false)) {
final String uuid = PathHelper.getName(request.getPathInfo());
if (uuid == null) {
response.setStatus(HttpServletResponse.SC_BAD_REQUEST);
response.getOutputStream().write("URL path doesn't end with UUID.\n".getBytes("UTF-8"));
return;
}
Matcher matcher = threadLocalUUIDMatcher.get();
matcher.reset(uuid);
if (!matcher.matches()) {
response.setStatus(HttpServletResponse.SC_BAD_REQUEST);
response.getOutputStream().write("ERROR (400): URL path doesn't end with UUID.\n".getBytes("UTF-8"));
return;
}
final SecurityContext securityContext = getConfig().getAuthenticator().initializeAndExamineRequest(request, response);
// Ensure access mode is frontend
securityContext.setAccessMode(AccessMode.Frontend);
request.setCharacterEncoding("UTF-8");
// Important: Set character encoding before calling response.getWriter() !!, see Servlet Spec 5.4
response.setCharacterEncoding("UTF-8");
// don't continue on redirects
if (response.getStatus() == 302) {
return;
}
uploader.setFileSizeMax(MEGABYTE * Long.parseLong(StructrApp.getConfigurationValue("UploadServlet.maxFileSize", MAX_FILE_SIZE)));
uploader.setSizeMax(MEGABYTE * Long.parseLong(StructrApp.getConfigurationValue("UploadServlet.maxRequestSize", MAX_REQUEST_SIZE)));
List fileItemsList = uploader.parseRequest(request);
Iterator fileItemsIterator = fileItemsList.iterator();
while (fileItemsIterator.hasNext()) {
final FileItem fileItem = fileItemsIterator.next();
try {
final GraphObject node = StructrApp.getInstance().getNodeById(uuid);
if (node == null) {
response.setStatus(HttpServletResponse.SC_NOT_FOUND);
response.getOutputStream().write("ERROR (404): File not found.\n".getBytes("UTF-8"));
}
if (node instanceof org.structr.web.entity.AbstractFile) {
final org.structr.dynamic.File file = (org.structr.dynamic.File) node;
if (file.isGranted(Permission.write, securityContext)) {
FileHelper.writeToFile(file, fileItem.getInputStream());
file.increaseVersion();
// upload trigger
file.notifyUploadCompletion();
} else {
response.setStatus(HttpServletResponse.SC_FORBIDDEN);
response.getOutputStream().write("ERROR (403): Write access forbidden.\n".getBytes("UTF-8"));
}
}
} catch (IOException ex) {
logger.log(Level.WARNING, "Could not write to file", ex);
}
}
tx.success();
} catch (FrameworkException | IOException | FileUploadException t) {
logger.log(Level.SEVERE, "Exception while processing request", t);
UiAuthenticator.writeInternalServerError(response);
}
}
}
© 2015 - 2025 Weber Informatics LLC | Privacy Policy