lemoncurry/micropub/views/media.py

import hashlib

from django.core.files.storage import default_storage as store
from django.http import HttpResponse
from django.views.decorators.csrf import csrf_exempt
from django.views.decorators.http import require_POST
import magic

from lemonauth import tokens
from lemoncurry.utils import absolute_url
from .. import error

ACCEPTED_MEDIA_TYPES = (
    "image/gif",
    "image/jpeg",
    "image/png",
)


@csrf_exempt
@require_POST
def media(request):
    token = tokens.auth(request)
    if "file" not in request.FILES:
        raise error.bad_req(
            "a file named 'file' must be provided to the media endpoint"
        )
    file = request.FILES["file"]
    if file.content_type not in ACCEPTED_MEDIA_TYPES:
        raise error.bad_req("unacceptable file type {0}".format(file.content_type))

    mime = None
    sha = hashlib.sha256()
    for chunk in file.chunks():
        if mime is None:
            mime = magic.from_buffer(chunk, mime=True)
        sha.update(chunk)

    if mime != file.content_type:
        raise error.bad_req(
            "detected file type {0} did not match specified file type {1}".format(
                mime, file.content_type
            )
        )

    path = "mp/{0[0]}/{2}.{1}".format(*mime.split("/"), sha.hexdigest())
    path = store.save(path, file)
    url = absolute_url(request, store.url(path))

    res = HttpResponse(status=201)
    res["Location"] = url
    return res