Use sqlalchemy as backend, implement JWT authentication, add uploading, commenting and voting

1 files changed, 34 insertions, 3 deletions

diff --git a/routes/media.py b/routes/media.py
index b9828a8..207eeda 100644
--- a/routes/media.py
+++ b/routes/media.py
@@ -13,14 +13,45 @@
 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
 from ..helpers import *
+import magic
 from datetime import datetime
 
-@route("/api/media")
+def _upload_file(file, entry=None):
+    f = File(id=ObjectId(), name=file.filename, upload=entry)
+    path = os.path.join(os.getcwd(), "media", str(f.id))
+    file.save(path)
+    
+    with open(path, "rb") as fobj:
+        f.hash = calculateHashForFile(fobj).hexdigest()
+        f.length = fobj.tell()
+    
+    f.content_type = magic.from_file(path, mime=True)
+    
+    return f
+
+def _delete_file(file):
+    try:
+        os.unlink(os.path.join(os.getcwd(), "media", str(file.id)))
+    except FileNotFoundError:
+        pass
+    except OSError:
+        print("Failed to unlink", file.id, file=sys.stderr)
+    
+@get("/api/media")
 def get_media():
     notAllowed()
 
+@post("/api/media")
+@jwt_auth_required
+def post_media():
+    session = DBSession()
+    f = _upload_file(next(request.files.values()))
+    session.add(f)
+    session.commit()
+    print(f.json())
+    return HTTPResponse(f.json(), status=201) 
 
-@route("/api/media/<id>")
+@get("/api/media/<id>")
 def get_media_id(id):
     session = DBSession()
     try:
@@ -37,6 +68,6 @@ def get_media_id(id):
             #return requests.request(request.method, file.download_url, allow_redirects=True)
             return HTTPResponse(status=302, headers={"Location" : file.download_url})
         else:
-            return static_file(file.id, os.path.join(os.getcwd(), "media"), file.content_type, file.name)
+            return static_file(str(file.id), os.path.join(os.getcwd(), "media"), file.content_type, download=file.name if request.params.download else False)
     
     raise HTTPResponse(status=404)