JohnCosta27/Haystack
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

protecting backend images

Browse Source
This commit is contained in:
John Costa
2025-09-14 19:09:28 +01:00
parent 3ebc0810e7
commit 1aadcacf8b
1 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
backend/images/handler.go
View File

@ -37,12 +37,26 @@ type ImagesReturn struct {
}
func (h *ImageHandler) serveImage(w http.ResponseWriter, r *http.Request) {
imageId, err := middleware.GetPathParamID(h.logger, "id", w, r)
imageID, err := middleware.GetPathParamID(h.logger, "id", w, r)
if err != nil {
return
}
image, err := h.imageModel.Get(r.Context(), imageId)
ctx := r.Context()
userID, err := middleware.GetUserID(ctx, h.logger, w)
if err != nil {
w.WriteHeader(http.StatusInternalServerError)
return
}
isAuthorized := h.imageModel.IsUserAuthorized(ctx, imageID, userID)
if !isAuthorized {
w.WriteHeader(http.StatusUnauthorized)
return
}
image, err := h.imageModel.Get(r.Context(), imageID)
if err != nil {
w.WriteHeader(http.StatusNotFound)
fmt.Fprintf(w, "Could not get image")