276 lines
10 KiB
C#
276 lines
10 KiB
C#
// (c) Copyright Ascensio System SIA 2010-2022
|
|
//
|
|
// This program is a free software product.
|
|
// You can redistribute it and/or modify it under the terms
|
|
// of the GNU Affero General Public License (AGPL) version 3 as published by the Free Software
|
|
// Foundation. In accordance with Section 7(a) of the GNU AGPL its Section 15 shall be amended
|
|
// to the effect that Ascensio System SIA expressly excludes the warranty of non-infringement of
|
|
// any third-party rights.
|
|
//
|
|
// This program is distributed WITHOUT ANY WARRANTY, without even the implied warranty
|
|
// of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. For details, see
|
|
// the GNU AGPL at: http://www.gnu.org/licenses/agpl-3.0.html
|
|
//
|
|
// You can contact Ascensio System SIA at Lubanas st. 125a-25, Riga, Latvia, EU, LV-1021.
|
|
//
|
|
// The interactive user interfaces in modified source and object code versions of the Program must
|
|
// display Appropriate Legal Notices, as required under Section 5 of the GNU AGPL version 3.
|
|
//
|
|
// Pursuant to Section 7(b) of the License you must retain the original Product logo when
|
|
// distributing the program. Pursuant to Section 7(e) we decline to grant you any rights under
|
|
// trademark law for use of our trademarks.
|
|
//
|
|
// All the Product's GUI elements, including illustrations and icon sets, as well as technical writing
|
|
// content are licensed under the terms of the Creative Commons Attribution-ShareAlike 4.0
|
|
// International. See the License terms at http://creativecommons.org/licenses/by-sa/4.0/legalcode
|
|
|
|
using SecurityContext = ASC.Core.SecurityContext;
|
|
|
|
namespace ASC.People.Api;
|
|
|
|
public class PhotoController : PeopleControllerBase
|
|
{
|
|
private readonly MessageService _messageService;
|
|
private readonly MessageTarget _messageTarget;
|
|
private readonly DisplayUserSettingsHelper _displayUserSettingsHelper;
|
|
private readonly SecurityContext _securityContext;
|
|
private readonly SettingsManager _settingsManager;
|
|
private readonly FileSizeComment _fileSizeComment;
|
|
private readonly SetupInfo _setupInfo;
|
|
|
|
public PhotoController(
|
|
UserManager userManager,
|
|
PermissionContext permissionContext,
|
|
ApiContext apiContext,
|
|
UserPhotoManager userPhotoManager,
|
|
MessageService messageService,
|
|
MessageTarget messageTarget,
|
|
DisplayUserSettingsHelper displayUserSettingsHelper,
|
|
SecurityContext securityContext,
|
|
SettingsManager settingsManager,
|
|
FileSizeComment fileSizeComment,
|
|
SetupInfo setupInfo,
|
|
IHttpClientFactory httpClientFactory,
|
|
IHttpContextAccessor httpContextAccessor)
|
|
: base(userManager, permissionContext, apiContext, userPhotoManager, httpClientFactory, httpContextAccessor)
|
|
{
|
|
_messageService = messageService;
|
|
_messageTarget = messageTarget;
|
|
_displayUserSettingsHelper = displayUserSettingsHelper;
|
|
_securityContext = securityContext;
|
|
_settingsManager = settingsManager;
|
|
_fileSizeComment = fileSizeComment;
|
|
_setupInfo = setupInfo;
|
|
}
|
|
|
|
[HttpPost("{userid}/photo/thumbnails")]
|
|
public ThumbnailsDataDto CreateMemberPhotoThumbnails(string userid, ThumbnailsRequestDto inDto)
|
|
{
|
|
var user = GetUserInfo(userid);
|
|
|
|
if (_userManager.IsSystemUser(user.Id))
|
|
{
|
|
throw new SecurityException();
|
|
}
|
|
|
|
_permissionContext.DemandPermissions(new UserSecurityProvider(user.Id), Constants.Action_EditUser);
|
|
|
|
if (!string.IsNullOrEmpty(inDto.TmpFile))
|
|
{
|
|
var fileName = Path.GetFileName(inDto.TmpFile);
|
|
var data = _userPhotoManager.GetTempPhotoData(fileName);
|
|
|
|
var settings = new UserPhotoThumbnailSettings(inDto.X, inDto.Y, inDto.Width, inDto.Height);
|
|
|
|
_settingsManager.SaveForUser(settings, user.Id);
|
|
_userPhotoManager.RemovePhoto(user.Id);
|
|
_userPhotoManager.SaveOrUpdatePhoto(user.Id, data);
|
|
_userPhotoManager.RemoveTempPhoto(fileName);
|
|
}
|
|
else
|
|
{
|
|
UserPhotoThumbnailManager.SaveThumbnails(_userPhotoManager, _settingsManager, inDto.X, inDto.Y, inDto.Width, inDto.Height, user.Id);
|
|
}
|
|
|
|
_userManager.SaveUserInfo(user, syncCardDav: true);
|
|
_messageService.Send(MessageAction.UserUpdatedAvatarThumbnails, _messageTarget.Create(user.Id), user.DisplayUserName(false, _displayUserSettingsHelper));
|
|
|
|
return new ThumbnailsDataDto(user.Id, _userPhotoManager);
|
|
}
|
|
|
|
[HttpDelete("{userid}/photo")]
|
|
public ThumbnailsDataDto DeleteMemberPhoto(string userid)
|
|
{
|
|
var user = GetUserInfo(userid);
|
|
|
|
if (_userManager.IsSystemUser(user.Id))
|
|
{
|
|
throw new SecurityException();
|
|
}
|
|
|
|
_permissionContext.DemandPermissions(new UserSecurityProvider(user.Id), Constants.Action_EditUser);
|
|
|
|
_userPhotoManager.RemovePhoto(user.Id);
|
|
_userManager.SaveUserInfo(user, syncCardDav: true);
|
|
_messageService.Send(MessageAction.UserDeletedAvatar, _messageTarget.Create(user.Id), user.DisplayUserName(false, _displayUserSettingsHelper));
|
|
|
|
return new ThumbnailsDataDto(user.Id, _userPhotoManager);
|
|
}
|
|
|
|
[HttpGet("{userid}/photo")]
|
|
public ThumbnailsDataDto GetMemberPhoto(string userid)
|
|
{
|
|
var user = GetUserInfo(userid);
|
|
|
|
if (_userManager.IsSystemUser(user.Id))
|
|
{
|
|
throw new SecurityException();
|
|
}
|
|
|
|
return new ThumbnailsDataDto(user.Id, _userPhotoManager);
|
|
}
|
|
|
|
[HttpPut("{userid}/photo")]
|
|
public ThumbnailsDataDto UpdateMemberPhoto(string userid, UpdateMemberRequestDto inDto)
|
|
{
|
|
var user = GetUserInfo(userid);
|
|
|
|
if (_userManager.IsSystemUser(user.Id))
|
|
{
|
|
throw new SecurityException();
|
|
}
|
|
|
|
if (inDto.Files != _userPhotoManager.GetPhotoAbsoluteWebPath(user.Id))
|
|
{
|
|
UpdatePhotoUrl(inDto.Files, user);
|
|
}
|
|
|
|
_userManager.SaveUserInfo(user, syncCardDav: true);
|
|
_messageService.Send(MessageAction.UserAddedAvatar, _messageTarget.Create(user.Id), user.DisplayUserName(false, _displayUserSettingsHelper));
|
|
|
|
return new ThumbnailsDataDto(user.Id, _userPhotoManager);
|
|
}
|
|
|
|
[HttpPost("{userid}/photo")]
|
|
public FileUploadResultDto UploadMemberPhoto(string userid, IFormCollection formCollection)
|
|
{
|
|
var result = new FileUploadResultDto();
|
|
var autosave = bool.Parse(formCollection["Autosave"]);
|
|
|
|
try
|
|
{
|
|
if (formCollection.Files.Count != 0)
|
|
{
|
|
Guid userId;
|
|
try
|
|
{
|
|
userId = new Guid(userid);
|
|
}
|
|
catch
|
|
{
|
|
userId = _securityContext.CurrentAccount.ID;
|
|
}
|
|
|
|
_permissionContext.DemandPermissions(new UserSecurityProvider(userId), Constants.Action_EditUser);
|
|
|
|
var userPhoto = formCollection.Files[0];
|
|
|
|
if (userPhoto.Length > _setupInfo.MaxImageUploadSize)
|
|
{
|
|
result.Success = false;
|
|
result.Message = _fileSizeComment.FileImageSizeExceptionString;
|
|
|
|
return result;
|
|
}
|
|
|
|
var data = new byte[userPhoto.Length];
|
|
using var inputStream = userPhoto.OpenReadStream();
|
|
|
|
var br = new BinaryReader(inputStream);
|
|
br.Read(data, 0, (int)userPhoto.Length);
|
|
br.Close();
|
|
|
|
CheckImgFormat(data);
|
|
|
|
if (autosave)
|
|
{
|
|
if (data.Length > _setupInfo.MaxImageUploadSize)
|
|
{
|
|
throw new ImageSizeLimitException();
|
|
}
|
|
|
|
var mainPhoto = _userPhotoManager.SaveOrUpdatePhoto(userId, data);
|
|
|
|
result.Data =
|
|
new
|
|
{
|
|
main = mainPhoto,
|
|
retina = _userPhotoManager.GetRetinaPhotoURL(userId),
|
|
max = _userPhotoManager.GetMaxPhotoURL(userId),
|
|
big = _userPhotoManager.GetBigPhotoURL(userId),
|
|
medium = _userPhotoManager.GetMediumPhotoURL(userId),
|
|
small = _userPhotoManager.GetSmallPhotoURL(userId),
|
|
};
|
|
}
|
|
else
|
|
{
|
|
result.Data = _userPhotoManager.SaveTempPhoto(data, _setupInfo.MaxImageUploadSize, UserPhotoManager.OriginalFotoSize.Width, UserPhotoManager.OriginalFotoSize.Height);
|
|
}
|
|
|
|
result.Success = true;
|
|
}
|
|
else
|
|
{
|
|
result.Success = false;
|
|
result.Message = PeopleResource.ErrorEmptyUploadFileSelected;
|
|
}
|
|
|
|
}
|
|
catch (Web.Core.Users.UnknownImageFormatException)
|
|
{
|
|
result.Success = false;
|
|
result.Message = PeopleResource.ErrorUnknownFileImageType;
|
|
}
|
|
catch (ImageWeightLimitException)
|
|
{
|
|
result.Success = false;
|
|
result.Message = PeopleResource.ErrorImageWeightLimit;
|
|
}
|
|
catch (ImageSizeLimitException)
|
|
{
|
|
result.Success = false;
|
|
result.Message = PeopleResource.ErrorImageSizetLimit;
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
result.Success = false;
|
|
result.Message = ex.Message.HtmlEncode();
|
|
}
|
|
|
|
return result;
|
|
}
|
|
|
|
private static void CheckImgFormat(byte[] data)
|
|
{
|
|
IImageFormat imgFormat;
|
|
try
|
|
{
|
|
using var img = Image.Load(data, out var format);
|
|
imgFormat = format;
|
|
}
|
|
catch (OutOfMemoryException)
|
|
{
|
|
throw new ImageSizeLimitException();
|
|
}
|
|
catch (ArgumentException error)
|
|
{
|
|
throw new Web.Core.Users.UnknownImageFormatException(error);
|
|
}
|
|
|
|
if (imgFormat.Name != "PNG" && imgFormat.Name != "JPEG")
|
|
{
|
|
throw new Web.Core.Users.UnknownImageFormatException();
|
|
}
|
|
}
|
|
}
|