@xrengine/server-core/src/hooks/validatePresignedRequest.ts

Shared components for XREngine server

import { HookContext } from '@feathersjs/feathers'

import {
  AVATAR_FILE_ALLOWED_EXTENSIONS,
  MAX_AVATAR_FILE_SIZE,
  MAX_THUMBNAIL_FILE_SIZE,
  MIN_AVATAR_FILE_SIZE,
  MIN_THUMBNAIL_FILE_SIZE
} from '@xrengine/common/src/constants/AvatarConstants'

export const validateGet = async (context: HookContext): Promise<HookContext> => {
  const q = context.params.query!
  switch (q.type) {
    case 'user-thumbnail':
      if (q.fileSize < MIN_THUMBNAIL_FILE_SIZE || q.fileSize > MAX_THUMBNAIL_FILE_SIZE)
        throw new Error('Thumbnail file size is outside the desired range.')
      break
    case 'avatar':
      if (q.fileSize < MIN_AVATAR_FILE_SIZE || q.fileSize > MAX_AVATAR_FILE_SIZE)
        throw new Error('Avatar file size is outside the desired range.')

      const allowedExtenstions = AVATAR_FILE_ALLOWED_EXTENSIONS.split(',')
      if (!allowedExtenstions.includes(q.fileName.substring(q.fileName.lastIndexOf('.'))))
        throw new Error('Avatar file type is not allowed.')
      break
    default:
      break
  }
  return context
}

export const checkDefaultResources = async (context: HookContext): Promise<HookContext> => {
  const q = context.params.query!.keys

  const defaultResources = await context.app.service('static-resource').find({
    query: {
      key: {
        $in: q
      },
      userId: null
    }
  })

  if (defaultResources.total > 0) throw new Error("Default resources can't be deleted.")
  return context
}