mirror of
https://github.com/OpenListTeam/OpenList.git
synced 2025-09-19 04:06:18 +08:00

提供一种类似大多数网盘的文件分享操作,这种分享方式可以通过强制 Web 代理隐藏文件源路径,可以设置分享码、最大访问数和过期时间,并且不需要启用 guest 用户。 在全局设置中可以调整: - 是否强制 Web 代理 - 是否允许预览 - 是否允许预览压缩文件 - 分享文件后,点击“复制链接”按钮复制的内容 前端部分:OpenListTeam/OpenList-Frontend#156 文档部分:OpenListTeam/OpenList-Docs#130 Close #183 Close #526 Close #860 Close #892 Close #1079 * feat(share): support more secure file sharing * feat(share): add archive preview * fix(share): fix some bugs * feat(openlist_share): add openlist share driver * fix(share): lack unwrap when get virtual path * fix: use unwrapPath instead of path for virtual file name comparison * fix(share): change request method of /api/share/list from GET to Any * fix(share): path traversal vulnerability in sharing path check * 修复分享alias驱动的文件 没开代理时无法获取URL * fix(sharing): update error message for sharing root link extraction --------- Co-authored-by: Suyunmeng <69945917+Suyunmeng@users.noreply.github.com> Co-authored-by: j2rong4cn <j2rong@qq.com>
182 lines
4.9 KiB
Go
182 lines
4.9 KiB
Go
package openlist_share
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"net/http"
|
|
"net/url"
|
|
stdpath "path"
|
|
"strings"
|
|
|
|
"github.com/OpenListTeam/OpenList/v4/internal/driver"
|
|
"github.com/OpenListTeam/OpenList/v4/internal/errs"
|
|
"github.com/OpenListTeam/OpenList/v4/internal/model"
|
|
"github.com/OpenListTeam/OpenList/v4/pkg/utils"
|
|
"github.com/OpenListTeam/OpenList/v4/server/common"
|
|
"github.com/go-resty/resty/v2"
|
|
)
|
|
|
|
type OpenListShare struct {
|
|
model.Storage
|
|
Addition
|
|
serverArchivePreview bool
|
|
}
|
|
|
|
func (d *OpenListShare) Config() driver.Config {
|
|
return config
|
|
}
|
|
|
|
func (d *OpenListShare) GetAddition() driver.Additional {
|
|
return &d.Addition
|
|
}
|
|
|
|
func (d *OpenListShare) Init(ctx context.Context) error {
|
|
d.Addition.Address = strings.TrimSuffix(d.Addition.Address, "/")
|
|
var settings common.Resp[map[string]string]
|
|
_, _, err := d.request("/public/settings", http.MethodGet, func(req *resty.Request) {
|
|
req.SetResult(&settings)
|
|
})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
d.serverArchivePreview = settings.Data["share_archive_preview"] == "true"
|
|
return nil
|
|
}
|
|
|
|
func (d *OpenListShare) Drop(ctx context.Context) error {
|
|
return nil
|
|
}
|
|
|
|
func (d *OpenListShare) List(ctx context.Context, dir model.Obj, args model.ListArgs) ([]model.Obj, error) {
|
|
var resp common.Resp[FsListResp]
|
|
_, _, err := d.request("/fs/list", http.MethodPost, func(req *resty.Request) {
|
|
req.SetResult(&resp).SetBody(ListReq{
|
|
PageReq: model.PageReq{
|
|
Page: 1,
|
|
PerPage: 0,
|
|
},
|
|
Path: stdpath.Join(fmt.Sprintf("/@s/%s", d.ShareId), dir.GetPath()),
|
|
Password: d.Pwd,
|
|
Refresh: false,
|
|
})
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
var files []model.Obj
|
|
for _, f := range resp.Data.Content {
|
|
file := model.ObjThumb{
|
|
Object: model.Object{
|
|
Name: f.Name,
|
|
Modified: f.Modified,
|
|
Ctime: f.Created,
|
|
Size: f.Size,
|
|
IsFolder: f.IsDir,
|
|
HashInfo: utils.FromString(f.HashInfo),
|
|
},
|
|
Thumbnail: model.Thumbnail{Thumbnail: f.Thumb},
|
|
}
|
|
files = append(files, &file)
|
|
}
|
|
return files, nil
|
|
}
|
|
|
|
func (d *OpenListShare) Link(ctx context.Context, file model.Obj, args model.LinkArgs) (*model.Link, error) {
|
|
path := utils.FixAndCleanPath(stdpath.Join(d.ShareId, file.GetPath()))
|
|
u := fmt.Sprintf("%s/sd%s?pwd=%s", d.Address, path, d.Pwd)
|
|
return &model.Link{URL: u}, nil
|
|
}
|
|
|
|
func (d *OpenListShare) GetArchiveMeta(ctx context.Context, obj model.Obj, args model.ArchiveArgs) (model.ArchiveMeta, error) {
|
|
if !d.serverArchivePreview || !d.ForwardArchiveReq {
|
|
return nil, errs.NotImplement
|
|
}
|
|
var resp common.Resp[ArchiveMetaResp]
|
|
_, code, err := d.request("/fs/archive/meta", http.MethodPost, func(req *resty.Request) {
|
|
req.SetResult(&resp).SetBody(ArchiveMetaReq{
|
|
ArchivePass: args.Password,
|
|
Path: stdpath.Join(fmt.Sprintf("/@s/%s", d.ShareId), obj.GetPath()),
|
|
Password: d.Pwd,
|
|
Refresh: false,
|
|
})
|
|
})
|
|
if code == 202 {
|
|
return nil, errs.WrongArchivePassword
|
|
}
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
var tree []model.ObjTree
|
|
if resp.Data.Content != nil {
|
|
tree = make([]model.ObjTree, 0, len(resp.Data.Content))
|
|
for _, content := range resp.Data.Content {
|
|
tree = append(tree, &content)
|
|
}
|
|
}
|
|
return &model.ArchiveMetaInfo{
|
|
Comment: resp.Data.Comment,
|
|
Encrypted: resp.Data.Encrypted,
|
|
Tree: tree,
|
|
}, nil
|
|
}
|
|
|
|
func (d *OpenListShare) ListArchive(ctx context.Context, obj model.Obj, args model.ArchiveInnerArgs) ([]model.Obj, error) {
|
|
if !d.serverArchivePreview || !d.ForwardArchiveReq {
|
|
return nil, errs.NotImplement
|
|
}
|
|
var resp common.Resp[ArchiveListResp]
|
|
_, code, err := d.request("/fs/archive/list", http.MethodPost, func(req *resty.Request) {
|
|
req.SetResult(&resp).SetBody(ArchiveListReq{
|
|
ArchiveMetaReq: ArchiveMetaReq{
|
|
ArchivePass: args.Password,
|
|
Path: stdpath.Join(fmt.Sprintf("/@s/%s", d.ShareId), obj.GetPath()),
|
|
Password: d.Pwd,
|
|
Refresh: false,
|
|
},
|
|
PageReq: model.PageReq{
|
|
Page: 1,
|
|
PerPage: 0,
|
|
},
|
|
InnerPath: args.InnerPath,
|
|
})
|
|
})
|
|
if code == 202 {
|
|
return nil, errs.WrongArchivePassword
|
|
}
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
var files []model.Obj
|
|
for _, f := range resp.Data.Content {
|
|
file := model.ObjThumb{
|
|
Object: model.Object{
|
|
Name: f.Name,
|
|
Modified: f.Modified,
|
|
Ctime: f.Created,
|
|
Size: f.Size,
|
|
IsFolder: f.IsDir,
|
|
HashInfo: utils.FromString(f.HashInfo),
|
|
},
|
|
Thumbnail: model.Thumbnail{Thumbnail: f.Thumb},
|
|
}
|
|
files = append(files, &file)
|
|
}
|
|
return files, nil
|
|
}
|
|
|
|
func (d *OpenListShare) Extract(ctx context.Context, obj model.Obj, args model.ArchiveInnerArgs) (*model.Link, error) {
|
|
if !d.serverArchivePreview || !d.ForwardArchiveReq {
|
|
return nil, errs.NotSupport
|
|
}
|
|
path := utils.FixAndCleanPath(stdpath.Join(d.ShareId, obj.GetPath()))
|
|
u := fmt.Sprintf("%s/sad%s?pwd=%s&inner=%s&pass=%s",
|
|
d.Address,
|
|
path,
|
|
d.Pwd,
|
|
utils.EncodePath(args.InnerPath, true),
|
|
url.QueryEscape(args.Password))
|
|
return &model.Link{URL: u}, nil
|
|
}
|
|
|
|
var _ driver.Driver = (*OpenListShare)(nil)
|